The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 2, 2020 | Sep 10, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Aug 10, 2021 | Sep 10, 2020 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-fipsUpgrade linuxUpgrade linux-aws-hweUpgrade linux-hweUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-azure-4.15Upgrade linux-snapdragonUpgrade linux-oemUpgrade linux-azureUpgrade linux-gke-4.15Upgrade linux-raspi2Upgrade linux-aws | Nov 19, 2024 | Sep 10, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 10, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub