{"cve":"CVE-2020-10690","nvd":{"published":"2020-05-08T15:15:11.880","modified":"2026-06-17T02:48:15.810","status":"Modified","description":"There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.4},"cwes":["CWE-416"],"references":["http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10690","https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html","https://security.netapp.com/advisory/ntap-20200608-0001/"],"products":["canonical:ubuntu_linux","debian:debian_linux","linux:linux_kernel","netapp:active_iq_unified_manager","netapp:element_software","netapp:h300e_firmware","netapp:h300s_firmware","netapp:h410c_firmware","netapp:h410s_firmware","netapp:h500e_firmware","netapp:h500s_firmware","netapp:h610c_firmware","netapp:h610s_firmware","netapp:h615c_firmware","netapp:h700e_firmware","netapp:h700s_firmware","netapp:hci_compute_node","netapp:hci_management_node","netapp:solidfire","netapp:steelstore_cloud_integrated_storage","opensuse:leap","redhat:enterprise_linux"],"source":"nvd","synced_at":"2026-10-19T21:04:18.695612450+00:00"},"epss":{"cve":"CVE-2020-10690","score":0.00359,"percentile":0.29633,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}