Log in Start free

Vulnerability · Published Jan 14, 2021 · Assigned by canonical

CVE-2020-16119DCCP CCID structure use-after-free

Medium 6.3

In plain English

A medium-severity use-after-free in Linux kernel from Canonical. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.4%top 62.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.14.6-1DEBIAN-CVE-2020-16119
Debian:13linux5.14.6-1DEBIAN-CVE-2020-16119
Debian:14linux5.14.6-1DEBIAN-CVE-2020-16119
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2020-16119
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2020-16119
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2020-16119
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2020-16119

Affected products (as reported)

VendorProductVersions
Canonical Linux kernel 5.4 kernel – before 5.4.0-51.565.3 kernel – before 5.3.0-68.634.15 kernel – before 4.15.0-121.1234.4 kernel – before 4.4.0-193.2243.13 kernel – before 3.13.0.182.1913.2 kernel – before 3.2.0-149.196

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

References