CVE-2020-25669

A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.

Link	Resource
https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/20/5	Exploit Mailing List
https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/05/2	Exploit Mailing List
https://www.openwall.com/lists/oss-security/2020/11/05/2,	Exploit Mailing List
https://www.openwall.com/lists/oss-security/2020/11/20/5,	Exploit Mailing List
https://security.netapp.com/advisory/ntap-20210702-0006/	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire_&_hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*

---

Published : 2021-05-26 12:15

Updated : 2023-02-24 06:41

---

NVD link : CVE-2020-25669

Mitre link : CVE-2020-25669

Netapp

Solidfire Baseboard Management Controller

CWE-416