An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an _blkdrain_queue() use-after-free because a certain error case is mishandled.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20856.json"
[
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"231863122652054263028857531051955777531",
"80932084466503091027412320820702423389",
"125019701506826739038144574984902607078",
"330410848915389110864989457459498275307"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@54648cf1ec2d7f4b6a71767799c45676a138ca24",
"id": "CVE-2018-20856-7823687e",
"target": {
"file": "block/blk-core.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 801.0,
"function_hash": "312760868546754367878135915757249692674"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@54648cf1ec2d7f4b6a71767799c45676a138ca24",
"id": "CVE-2018-20856-a29d783f",
"target": {
"file": "block/blk-core.c",
"function": "blk_init_allocated_queue"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20856.json"
[
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 801.0,
"function_hash": "312760868546754367878135915757249692674"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/54648cf1ec2d7f4b6a71767799c45676a138ca24",
"id": "CVE-2018-20856-16bb435d",
"target": {
"file": "block/blk-core.c",
"function": "blk_init_allocated_queue"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"231863122652054263028857531051955777531",
"80932084466503091027412320820702423389",
"125019701506826739038144574984902607078",
"330410848915389110864989457459498275307"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/54648cf1ec2d7f4b6a71767799c45676a138ca24",
"id": "CVE-2018-20856-e9535da8",
"target": {
"file": "block/blk-core.c"
}
}
]