Wind River Support Network

HomeDefectsSCP7-992

Fixed

SCP7-992 : Security Advisory - linux - CVE-2018-20836

Created: May 8, 2019 Updated: Aug 14, 2019

Resolved Date: Jul 26, 2019

Found In Version: 7.0.0.2

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Kernel

Description

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2018-20836 User=admin}