← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-15436

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

No Active Exploit Signals
CVSS Base Score
6.7
MEDIUM
EPSS Probability:0.93%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
linux linux_kernel all
broadcom brocade_fabric_operating_system_firmware all
netapp cloud_backup all
netapp solidfire_\&_hci_management_node all
netapp solidfire_baseboard_management_controller_firmware all
netapp solidfire_baseboard_management_controller all
netapp h410c_firmware all
netapp h410c all
netapp h610c_firmware all
netapp h610c all
netapp h610s_firmware all
netapp h610s all
netapp h615c_firmware all
netapp h615c all
netapp a700s_firmware all
netapp a700s all
netapp aff_8700_firmware all
netapp aff_8700 all
netapp fas_8700_firmware all
netapp fas_8700 all
netapp aff_8300_firmware all
netapp aff_8300 all
netapp fas_8300_firmware all
netapp fas_8300 all
netapp aff_a400_firmware all
netapp aff_a400 all
netapp fabric-attached_storage_a400_firmware all
netapp fabric-attached_storage_a400 all
netapp a250_firmware all
netapp a250 all
netapp aff_500f_firmware all
netapp aff_500f all
netapp fas_500f_firmware all
netapp fas_500f all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.928%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityopenEuler · Vendor · China
Reserved2020-06-30T00:00:00
Published2020-11-23T20:08:17
Last Updated2024-08-04T13:15:20

LINK COPIED TO CLIPBOARD