A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.
[
{
"events": [
{
"introduced": "2.6.26"
},
{
"fixed": "4.4.248"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.248"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.14.212"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.19.163"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "5.4.83"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.9.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "32"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "33"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "10.0"
}
]
},
{
"events": [
{
"introduced": "7.4.0"
},
{
"last_affected": "7.7.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.9.13."
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-29661.json"