PT-2022-8861 · Linux+3 · Linux Kernel+3

Kyungtae Kim · Published 2020-10-30 · Updated 2023-05-16 · CVE-2020-27784

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer ioctl() occurs because it tries to access a printer dev instance that had been freed by gprinter free(). This results in a use-after-free issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-201

CWE-416

Related Identifiers

ALT-PU-2020-3166

ALT-PU-2020-3182

ALT-PU-2020-3211

ALT-PU-2020-3428

ALT-PU-2020-3454

ALT-PU-2020-3470

ALT-PU-2020-3553

ALT-PU-2020-3570

ALT-PU-2021-1083

ALT-PU-2021-1093

ALT-PU-2021-1105

ALT-PU-2021-1128

ALT-PU-2021-1211

ALT-PU-2021-1531

ALT-PU-2021-1840

CVE-2020-27784

OESA-2022-1925

OESA-2022-1926

OPENSUSE-SU-2022_3264-1

OPENSUSE-SU-2022_3609-1

SUSE-SU-2022:3264-1

SUSE-SU-2022:3450-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3809-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

References · 198

• https://nvd.nist.gov/vuln/detail/CVE-2022-2663 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-27784 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27784 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3450-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-27784 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39842 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1926 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3264-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3809-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27784 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3061 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3609-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2991 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39188 · Security Note