CVE-2020-36694

KASAN: use-after-free Read in dump_schedule

References

Notes

 carnil> Originally fixed with cc00bcaa5899 ("netfilter: x_tables:
 carnil> Switch synchronization to RCU") in 5.10 but the patch was
 carnil> reverted with d3d40f237480 ("Revert "netfilter: x_tables:
 carnil> Switch synchronization to RCU"") in 5.12-rc5.

Bugs

Status

Branch Status
4.19-buster-security unknown
4.19-upstream-stable unknown
5.10-bullseye-security needed
5.10-upstream-stable needed
6.1-bookworm-security needed
6.1-upstream-stable needed
6.6-upstream-stable unknown
6.8-upstream-stable unknown
sid needed
upstream needed