UBUNTU-CVE-2018-20836

Details

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

Affected Packages(32 packages)

linux-azure

Ubuntu 14.04 LTS

Fixed in:

4.15.0-1037.39~14.04.2

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-157.185

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1090.101

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1032.34~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1037.39~16.04.1

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1027.28~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-45.48~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1052.59

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1117.126

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1121.127

References

REPORT

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b90cd6f2b905905fb42671009dc0e27c310a16ae

REPORT

https://ubuntu.com/security/CVE-2018-20836

ADVISORY

https://ubuntu.com/security/notices/USN-4076-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-20836