CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2020-12464
Medium (6.7). EPSS 0.8% chance of exploitation in the next 30 days.
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
- netapp:active_iq_unified_manager
- netapp:aff_a700s
- netapp:cloud_backup
- netapp:hci_baseboard_management_controller
- netapp:hci_compute_node
- netapp:hci_storage_nodes
- netapp:solidfire_\&_hci_storage_node
- netapp:solidfire_baseboard_management_controller
- netapp:steelstore_cloud_integrated_storage
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b
- https://github.com/torvalds/linux/commit/056ad39ee9253873522f6469c3364964a322912b
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html