In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.
[
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"function_hash": "210015214773287380864348998756296554035",
"length": 110.0
},
"target": {
"file": "drivers/net/can/slcan.c",
"function": "slcan_write_wakeup"
},
"id": "CVE-2020-14416-2a8230d4",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92042888723748680493539729875888849886",
"70443817358433202155232512541429275943",
"189855062376439255223690753707367382256",
"153176016479339926500479295323932646193",
"301676624738812680822448303808705352400",
"52728217037875466674635199283686726654",
"109487606968209747193012490677550052906",
"92812643535840360093834175899739529421",
"141791635946228964822820567742796819292",
"102515663493777729296765479335467090037",
"79626563358425785943452556740955099867"
]
},
"target": {
"file": "drivers/net/slip/slip.c"
},
"id": "CVE-2020-14416-7563bc46",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"function_hash": "210015214773287380864348998756296554035",
"length": 110.0
},
"target": {
"file": "drivers/net/slip/slip.c",
"function": "slip_write_wakeup"
},
"id": "CVE-2020-14416-7e1d6509",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48232651930606850602662134716028175148",
"316190641189294345493948259612026190096",
"15106859742996137166547950286228673745",
"114901867075428367262746767986195935912",
"243385367528054944216784629485411870644",
"130176689346485570967089956433728270840",
"109487606968209747193012490677550052906",
"92812643535840360093834175899739529421",
"141791635946228964822820567742796819292",
"296500007506234020612273867042883179657",
"173888619229612891392750668690637320165"
]
},
"target": {
"file": "drivers/net/can/slcan.c"
},
"id": "CVE-2020-14416-8380465e",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"function_hash": "338293325080676172208986018478196318775",
"length": 433.0
},
"target": {
"file": "drivers/net/slip/slip.c",
"function": "slip_close"
},
"id": "CVE-2020-14416-b8965a3e",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0ace17d56824165c7f4c68785d6b58971db954dd",
"digest": {
"function_hash": "283016516502498512129184272344448151516",
"length": 334.0
},
"target": {
"file": "drivers/net/can/slcan.c",
"function": "slcan_close"
},
"id": "CVE-2020-14416-f0ee3bb5",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-14416.json"