CVE-2020-15436: Use After Free
A use-after-free flaw was observed in blkdevget(), in fs/blockdev.c after a call to blkdevget() fails, and its refcount gets freed/released. This problem may cause a denial of service problem with a special user privilege, and may even lead to a confidentiality issue.
Other sources
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.
Affected Software
Remediation
Information
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-15436?
CVE-2020-15436 is classified as a moderate severity vulnerability that can lead to denial of service and potential confidentiality issues.
How do I fix CVE-2020-15436?
To fix CVE-2020-15436, update the affected kernel packages to the recommended versions or later, specifically the version 0:3.10.0-1160.15.2.rt56.1152.el7 or equivalent for your distribution.
Which systems are affected by CVE-2020-15436?
CVE-2020-15436 affects various versions of the Linux kernel and specific configurations of the Red Hat kernel and kernel-rt.
What are the potential impacts of CVE-2020-15436?
Exploiting CVE-2020-15436 may allow an attacker to cause a denial of service or potentially lead to unauthorized access to sensitive information.
Is there a specific user privilege required to exploit CVE-2020-15436?
Yes, exploiting CVE-2020-15436 requires special user privileges, making it less likely for casual users to leverage this vulnerability.