Lucene search

K
redhatcveRedhat.comRH:CVE-2018-20856
HistoryApr 07, 2020 - 4:59 p.m.

CVE-2018-20856

2020-04-0716:59:02
redhat.com
access.redhat.com
19

EPSS

0.001

Percentile

28.5%

A flaw was found in the Linux kernel’s block driver implementation (blk_drain_queue() function) where a use-after-free condition could be triggered while draining the outstanding command queue in the systems block device subsystem. An attacker could use this flaw to crash the system or corrupt local memory, which may lead to privilege escalation.