There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2020 | May 8, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Mar 24, 2021 | May 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Dec 15, 2020 | May 8, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 22, 2020 | Nov 25, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 5, 2020 | May 8, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | May 15, 2020 | May 8, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-185-powerpc64-smpUpgrade linux-image-4.4.0-1076-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-185-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-185-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-185-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1139-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-185-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-185-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1135-raspi2Upgrade linux-image-4.4.0-185-powerpc64-embUpgrade linux-image-4.4.0-1110-aws | Aug 5, 2020 | May 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub