CVE-2018-20836

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

b90cd6f2b905905fb42671009dc0e27c310a16ae

Type

GIT

Repo

https://github.com/torvalds/linux

Events

Introduced

Fixed

8fe28cb58bcb235034b64cbbb7550a8a43fd88be

Fixed

b90cd6f2b905905fb42671009dc0e27c310a16ae

Database specific

Show details

{
    "versions":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "4.20"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20836.json"

unresolved_ranges

[
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "fixed":  "3.16.72"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "3.17"
            },
            {
                "fixed":  "3.18.140"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "3.19"
            },
            {
                "fixed":  "4.4.180"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "4.5"
            },
            {
                "fixed":  "4.9.175"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "4.10"
            },
            {
                "fixed":  "4.14.118"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "4.15"
            },
            {
                "fixed":  "4.19.42"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "16.04"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "8.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "9.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "10.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "5.0.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "5.1.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "9.5"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "7.2"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "7.2"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "15.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "15.1"
            }
        ]
    }
]