CVE-2020-10690

🗓️ 08 May 2020 13:48:30Reported by redhatType

cve🔗 web.nvd.nist.gov👁 454 Views🌐 WEB

Use-after-free in kernel causing system crash due to race condition in resource deallocatio

Reporter	Title	Published	Views	Family All 274
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	25 May 202223:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus	3 Mar 202121:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by kernel vulnerabilities	13 Apr 202116:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
CBLMariner	CVE-2020-10690 affecting package kernel 5.4.91-6	3 Mar 202103:44	–	cbl_mariner
Tenable Nessus	CentOS 8 : kernel (CESA-2020:1769)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2020:4060)	20 Oct 202000:00	–	nessus
Tenable Nessus	Debian DLA-2241-2 : linux security update	10 Jun 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-2514)	14 Dec 202000:00	–	nessus

NVD

Vulners

Node

linux linux_kernelRange<5.5

Node

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

debian debian_linuxMatch8.0

Node

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04esm

Node

opensuse leapMatch15.1

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp solidfireMatch-

netapp steelstore_cloud_integrated_storageMatch-

netapp hci_compute_nodeMatch-

Node

AND

netapp h300s_firmwareMatch-

netapp h300sMatch-

Node

AND

netapp h500s_firmwareMatch-

netapp h500sMatch-

Node

AND

netapp h700s_firmwareMatch-

netapp h700sMatch-

Node

AND

netapp h300e_firmwareMatch-

netapp h300eMatch-

Node

AND

netapp h500e_firmwareMatch-

netapp h500eMatch-

Node

AND

netapp h700e_firmwareMatch-

netapp h700eMatch-

Node

AND

netapp h410s_firmwareMatch-

netapp h410sMatch-

Node

AND

netapp h410c_firmwareMatch-

netapp h410cMatch-

Node

AND

netapp h610c_firmwareMatch-

netapp h610cMatch-

Node

AND

netapp h610s_firmwareMatch-

netapp h610sMatch-

Node

AND

netapp h615c_firmwareMatch-

netapp h615cMatch-

[
  {
    "product": "kernel",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "all kernel versions before 5.5"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2020/06/msg00011.html
usn	www.usn.ubuntu.com/4419-1/
lists	www.lists.debian.org/debian-lts-announce/2020/06/msg00013.html
security	www.security.netapp.com/advisory/ntap-20200608-0001/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

Parameter	Position	Path	Description	CWE
/dev/ptpX	path	/dev/ptpX	Use-after-free in Linux kernel before 5.5 due to a race between ptp_clock release and cdev during resource deallocation; if a high-privilege process sleeps and the device is removed, inode points to freed cdev, causing a crash.	CWE-416

17 Jun 2026 02:48Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.4

CVSS 3.16.4 - 6.5

EPSS0.00359

CWE-416