There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2020 | May 8, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Mar 24, 2021 | May 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernelUpgrade kernel-headersUpgrade kernel-devel | Dec 15, 2020 | May 8, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 22, 2020 | Nov 25, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 8, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 5, 2020 | May 8, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extra | May 15, 2020 | May 8, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-185-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-185-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1076-kvmUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-185-lowlatencyUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-185-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.4.0-1135-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-185-powerpc-smpUpgrade linux-image-4.4.0-185-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-185-powerpc-e500mcUpgrade linux-image-4.4.0-1139-snapdragonUpgrade linux-image-powerpc-smp | Aug 5, 2020 | May 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub