Debian/linux: medium 6.4
There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp
Action: Upgrade linux to 5.4.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4.8-1 | - |
Fixed versions
| 5.4.8-1 |
Sources
- osv: DEBIAN-CVE-2020-10690#Debian:13/linux
- https://security-tracker.debian.org/tracker/CVE-2020-10690
published · modified · JSON