CVE-2020-36387
kernel: use-after-free related to io_async_task_func() reference holding in fs/io_uring.c
Loading…
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 11, 2020
Updated · November 22, 2025
Description
A flaw was found in the Linux kernel. A use-after-free can occur to io_async_task_func and ctx reference holding. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-416 · Use After Free