Use After Free The advisory has been revoked - it doesn't affect any version of package kernel-rt_debug-devel (opens in a new tab)
Threat Intelligence
EPSS
The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
0.8% (52nd percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-SLES151-KERNELRTDEBUGDEVEL-2704864
- published14 Apr 2022
- disclosed4 Sept 2020
Introduced: 4 Sep 2020
CVE-2020-12464 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
Amendment
The SLES security team deemed this advisory irrelevant for SLES:15.1.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-rt_debug-devel package and not the kernel-rt_debug-devel package as distributed by SLES.
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
References
- https://www.suse.com/security/cve/CVE-2020-12464.html
- https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html
- https://www.suse.com/support/update/announcement/2020/suse-su-20202487-1/
- https://bugzilla.suse.com/1051510
- https://bugzilla.suse.com/1058115
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1071995
- https://bugzilla.suse.com/1082555
- https://bugzilla.suse.com/1083647
- https://bugzilla.suse.com/1085030
- https://bugzilla.suse.com/1089895
- https://bugzilla.suse.com/1090036
- https://bugzilla.suse.com/1103990
- https://bugzilla.suse.com/1103991
- https://bugzilla.suse.com/1103992
- https://bugzilla.suse.com/1104745
- https://bugzilla.suse.com/1109837
- https://bugzilla.suse.com/1111666
- https://bugzilla.suse.com/1112178
- https://bugzilla.suse.com/1112374
- https://bugzilla.suse.com/1113956
- https://bugzilla.suse.com/1114279
- https://bugzilla.suse.com/1124278
- https://bugzilla.suse.com/1127354
- https://bugzilla.suse.com/1127355
- https://bugzilla.suse.com/1127371
- https://bugzilla.suse.com/1133021
- https://bugzilla.suse.com/1137325
- https://bugzilla.suse.com/1142685
- https://bugzilla.suse.com/1144333
- https://bugzilla.suse.com/1145929
- https://bugzilla.suse.com/1148868
- https://bugzilla.suse.com/1150660
- https://bugzilla.suse.com/1151794
- https://bugzilla.suse.com/1151927
- https://bugzilla.suse.com/1152489
- https://bugzilla.suse.com/1152624
- https://bugzilla.suse.com/1154824
- https://bugzilla.suse.com/1157169
- https://bugzilla.suse.com/1158265
- https://bugzilla.suse.com/1158983
- https://bugzilla.suse.com/1159037
- https://bugzilla.suse.com/1159058
- https://bugzilla.suse.com/1159199
- https://bugzilla.suse.com/1160388
- https://bugzilla.suse.com/1160947
- https://bugzilla.suse.com/1161016
- https://bugzilla.suse.com/1162002
- https://bugzilla.suse.com/1162063
- https://bugzilla.suse.com/1163309
- https://bugzilla.suse.com/1163403
- https://bugzilla.suse.com/1163897
- https://bugzilla.suse.com/1164284
- https://bugzilla.suse.com/1164780
- https://bugzilla.suse.com/1164871
- https://bugzilla.suse.com/1165183
- https://bugzilla.suse.com/1165478
- https://bugzilla.suse.com/1165741
- https://bugzilla.suse.com/1166780
- https://bugzilla.suse.com/1166860
- https://bugzilla.suse.com/1166861
- https://bugzilla.suse.com/1166862
- https://bugzilla.suse.com/1166864
- https://bugzilla.suse.com/1166866
- https://bugzilla.suse.com/1166867
- https://bugzilla.suse.com/1166868
- https://bugzilla.suse.com/1166870
- https://bugzilla.suse.com/1166940
- https://bugzilla.suse.com/1166969
- https://bugzilla.suse.com/1166978
- https://bugzilla.suse.com/1166985
- https://bugzilla.suse.com/1167104
- https://bugzilla.suse.com/1167288
- https://bugzilla.suse.com/1167574
- https://bugzilla.suse.com/1167851
- https://bugzilla.suse.com/1167867
- https://bugzilla.suse.com/1168081
- https://bugzilla.suse.com/1168202
- https://bugzilla.suse.com/1168332
- https://bugzilla.suse.com/1168486
- https://bugzilla.suse.com/1168670
- https://bugzilla.suse.com/1168760
- https://bugzilla.suse.com/1168762
- https://bugzilla.suse.com/1168763
- https://bugzilla.suse.com/1168764
- https://bugzilla.suse.com/1168765
- https://bugzilla.suse.com/1168789
- https://bugzilla.suse.com/1168881
- https://bugzilla.suse.com/1168884
- https://bugzilla.suse.com/1168952
- https://bugzilla.suse.com/1168959
- https://bugzilla.suse.com/1169020
- https://bugzilla.suse.com/1169057
- https://bugzilla.suse.com/1169194
- https://bugzilla.suse.com/1169390
- https://bugzilla.suse.com/1169514
- https://bugzilla.suse.com/1169525
- https://bugzilla.suse.com/1169625
- https://bugzilla.suse.com/1169762
- https://bugzilla.suse.com/1169771
- https://bugzilla.suse.com/1169795
- https://bugzilla.suse.com/1170011
- https://bugzilla.suse.com/1170056
- https://bugzilla.suse.com/1170125
- https://bugzilla.suse.com/1170145
- https://bugzilla.suse.com/1170284
- https://bugzilla.suse.com/1170345
- https://bugzilla.suse.com/1170442
- https://bugzilla.suse.com/1170457
- https://bugzilla.suse.com/1170522
- https://bugzilla.suse.com/1170592
- https://bugzilla.suse.com/1170617
- https://bugzilla.suse.com/1170618
- https://bugzilla.suse.com/1170620
- https://bugzilla.suse.com/1170621
- https://bugzilla.suse.com/1170770
- https://bugzilla.suse.com/1170778
- https://bugzilla.suse.com/1170791
- https://bugzilla.suse.com/1170901
- https://bugzilla.suse.com/1171078
- https://bugzilla.suse.com/1171098
- https://bugzilla.suse.com/1171118
- https://bugzilla.suse.com/1171124
- https://bugzilla.suse.com/1171189
- https://bugzilla.suse.com/1171191
- https://bugzilla.suse.com/1171195
- https://bugzilla.suse.com/1171202
- https://bugzilla.suse.com/1171205
- https://bugzilla.suse.com/1171214
- https://bugzilla.suse.com/1171217
- https://bugzilla.suse.com/1171218
- https://bugzilla.suse.com/1171219
- https://bugzilla.suse.com/1171220
- https://bugzilla.suse.com/1171244
- https://bugzilla.suse.com/1171293
- https://bugzilla.suse.com/1171417
- https://bugzilla.suse.com/1171424
- https://bugzilla.suse.com/1171527
- https://bugzilla.suse.com/1171529
- https://bugzilla.suse.com/1171530
- https://bugzilla.suse.com/1171558
- https://bugzilla.suse.com/1171599
- https://bugzilla.suse.com/1171600
- https://bugzilla.suse.com/1171601
- https://bugzilla.suse.com/1171602
- https://bugzilla.suse.com/1171604
- https://bugzilla.suse.com/1171605
- https://bugzilla.suse.com/1171606
- https://bugzilla.suse.com/1171607
- https://bugzilla.suse.com/1171608
- https://bugzilla.suse.com/1171609
- https://bugzilla.suse.com/1171610
- https://bugzilla.suse.com/1171611
- https://bugzilla.suse.com/1171612
- https://bugzilla.suse.com/1171613
- https://bugzilla.suse.com/1171614
- https://bugzilla.suse.com/1171615
- https://bugzilla.suse.com/1171616
- https://bugzilla.suse.com/1171617
- https://bugzilla.suse.com/1171618
- https://bugzilla.suse.com/1171619
- https://bugzilla.suse.com/1171620
- https://bugzilla.suse.com/1171621
- https://bugzilla.suse.com/1171622
- https://bugzilla.suse.com/1171623
- https://bugzilla.suse.com/1171624
- https://bugzilla.suse.com/1171625
- https://bugzilla.suse.com/1171626
- https://bugzilla.suse.com/1171662
- https://bugzilla.suse.com/1171679
- https://bugzilla.suse.com/1171691
- https://bugzilla.suse.com/1171692
- https://bugzilla.suse.com/1171694
- https://bugzilla.suse.com/1171695
- https://bugzilla.suse.com/1171732
- https://bugzilla.suse.com/1171736
- https://bugzilla.suse.com/1171739
- https://bugzilla.suse.com/1171743
- https://bugzilla.suse.com/1171753
- https://bugzilla.suse.com/1171759
- https://bugzilla.suse.com/1171817
- https://bugzilla.suse.com/1171835
- https://bugzilla.suse.com/1171841
- https://bugzilla.suse.com/1171868
- https://bugzilla.suse.com/1171904
- https://bugzilla.suse.com/1171948
- https://bugzilla.suse.com/1171949
- https://bugzilla.suse.com/1171951
- https://bugzilla.suse.com/1171952
- https://bugzilla.suse.com/1171979
- https://bugzilla.suse.com/1171982
- https://bugzilla.suse.com/1171983
- https://bugzilla.suse.com/1171988
- https://bugzilla.suse.com/1172017
- https://bugzilla.suse.com/1172096
- https://bugzilla.suse.com/1172097
- https://bugzilla.suse.com/1172098
- https://bugzilla.suse.com/1172099
- https://bugzilla.suse.com/1172101
- https://bugzilla.suse.com/1172102
- https://bugzilla.suse.com/1172103
- https://bugzilla.suse.com/1172104
- https://bugzilla.suse.com/1172127
- https://bugzilla.suse.com/1172130
- https://bugzilla.suse.com/1172185
- https://bugzilla.suse.com/1172188
- https://bugzilla.suse.com/1172199
- https://bugzilla.suse.com/1172201
- https://bugzilla.suse.com/1172202
- https://bugzilla.suse.com/1172221
- https://bugzilla.suse.com/1172247
- https://bugzilla.suse.com/1172249
- https://bugzilla.suse.com/1172251
- https://bugzilla.suse.com/1172257
- https://bugzilla.suse.com/1172317
- https://bugzilla.suse.com/1172342
- https://bugzilla.suse.com/1172343
- https://bugzilla.suse.com/1172344
- https://bugzilla.suse.com/1172366
- https://bugzilla.suse.com/1172378
- https://bugzilla.suse.com/1172391
- https://bugzilla.suse.com/1172397
- https://bugzilla.suse.com/1172453
- https://bugzilla.suse.com/1172458
- https://bugzilla.suse.com/1172484
- https://bugzilla.suse.com/1172537
- https://bugzilla.suse.com/1172538
- https://bugzilla.suse.com/1172687
- https://bugzilla.suse.com/1172719
- https://bugzilla.suse.com/1172759
- https://bugzilla.suse.com/1172775
- https://bugzilla.suse.com/1172781
- https://bugzilla.suse.com/1172782
- https://bugzilla.suse.com/1172783
- https://bugzilla.suse.com/1172871
- https://bugzilla.suse.com/1172872
- https://bugzilla.suse.com/1172999
- https://bugzilla.suse.com/1173060
- https://bugzilla.suse.com/1173074
- https://bugzilla.suse.com/1173146
- https://bugzilla.suse.com/1173265
- https://bugzilla.suse.com/1173280
- https://bugzilla.suse.com/1173284
- https://bugzilla.suse.com/1173428
- https://bugzilla.suse.com/1173514
- https://bugzilla.suse.com/1173567
- https://bugzilla.suse.com/1173573
- https://bugzilla.suse.com/1173746
- https://bugzilla.suse.com/1173818
- https://bugzilla.suse.com/1173820
- https://bugzilla.suse.com/1173825
- https://bugzilla.suse.com/1173826
- https://bugzilla.suse.com/1173833
- https://bugzilla.suse.com/1173838
- https://bugzilla.suse.com/1173839
- https://bugzilla.suse.com/1173845
- https://bugzilla.suse.com/1173857
- https://bugzilla.suse.com/1174113
- https://bugzilla.suse.com/1174115
- https://bugzilla.suse.com/1174122
- https://bugzilla.suse.com/1174123
- https://bugzilla.suse.com/1174186
- https://bugzilla.suse.com/1174187
- https://bugzilla.suse.com/1174296
- https://bugzilla.suse.com/1174343
- https://bugzilla.suse.com/1174356
- https://bugzilla.suse.com/1174409
- https://bugzilla.suse.com/1174438
- https://bugzilla.suse.com/1174462
- https://www.suse.com/security/cve/CVE-2018-1000199/
- https://www.suse.com/security/cve/CVE-2019-19462/
- https://www.suse.com/security/cve/CVE-2019-20806/
- https://www.suse.com/security/cve/CVE-2019-20810/
- https://www.suse.com/security/cve/CVE-2019-20812/
- https://www.suse.com/security/cve/CVE-2019-20908/
- https://www.suse.com/security/cve/CVE-2019-9455/
- https://www.suse.com/security/cve/CVE-2020-0305/
- https://www.suse.com/security/cve/CVE-2020-0543/
- https://www.suse.com/security/cve/CVE-2020-10135/
- https://www.suse.com/security/cve/CVE-2020-10690/
- https://www.suse.com/security/cve/CVE-2020-10711/
- https://www.suse.com/security/cve/CVE-2020-10720/
- https://www.suse.com/security/cve/CVE-2020-10732/
- https://www.suse.com/security/cve/CVE-2020-10751/
- https://www.suse.com/security/cve/CVE-2020-10757/
- https://www.suse.com/security/cve/CVE-2020-10766/
- https://www.suse.com/security/cve/CVE-2020-10767/
- https://www.suse.com/security/cve/CVE-2020-10768/
- https://www.suse.com/security/cve/CVE-2020-10769/
- https://www.suse.com/security/cve/CVE-2020-10773/
- https://www.suse.com/security/cve/CVE-2020-10781/
- https://www.suse.com/security/cve/CVE-2020-11669/
- https://www.suse.com/security/cve/CVE-2020-12114/
- https://www.suse.com/security/cve/CVE-2020-12464/
- https://www.suse.com/security/cve/CVE-2020-12652/
- https://www.suse.com/security/cve/CVE-2020-12653/
- https://www.suse.com/security/cve/CVE-2020-12654/
- https://www.suse.com/security/cve/CVE-2020-12655/
- https://www.suse.com/security/cve/CVE-2020-12656/
- https://www.suse.com/security/cve/CVE-2020-12657/
- https://www.suse.com/security/cve/CVE-2020-12659/
- https://www.suse.com/security/cve/CVE-2020-12769/
- https://www.suse.com/security/cve/CVE-2020-12771/
- https://www.suse.com/security/cve/CVE-2020-12888/
- https://www.suse.com/security/cve/CVE-2020-13143/
- https://www.suse.com/security/cve/CVE-2020-13974/
- https://www.suse.com/security/cve/CVE-2020-14416/
- https://www.suse.com/security/cve/CVE-2020-15393/
- https://www.suse.com/security/cve/CVE-2020-15780/
- https://www.suse.com/support/security/rating/
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b
- https://github.com/torvalds/linux/commit/056ad39ee9253873522f6469c3364964a322912b
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
- https://lkml.org/lkml/2020/3/23/52
- https://patchwork.kernel.org/patch/11463781/
- https://security.netapp.com/advisory/ntap-20200608-0001/
- https://usn.ubuntu.com/4387-1/
- https://usn.ubuntu.com/4388-1/
- https://usn.ubuntu.com/4389-1/
- https://usn.ubuntu.com/4390-1/
- https://usn.ubuntu.com/4391-1/
- https://www.debian.org/security/2020/dsa-4698
- https://www.debian.org/security/2020/dsa-4699