CVE-2020-36791
High
Description
In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599be01ee567 ("net_sched: fix an OOB access in cls_tcindex") I moved cp->hash calculation before the first tcindex_alloc_perfect_hash(), but cp->alloc_hash is left untouched. This difference could lead to another out of bound access. cp->alloc_hash should always be the size allocated, we should update it after this tcindex_alloc_perfect_hash().
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedMay 7, 2025
First seenMay 7, 2025
How to fix
Update
- linux linux_kernel4.4.218, 4.9.218, 4.14.175, 4.19.114, 5.4.29, 5.5.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.4.214 ≤ v < 4.4.218, 4.9.214 ≤ v < 4.9.218, 4.14.171 ≤ v < 4.14.175, 4.19.103 ≤ v < 4.19.114, 5.4.19 ≤ v < 5.4.29, 5.5.3 ≤ v < 5.5.14, 5.6 | 4.4.218, 4.9.218, 4.14.175, 4.19.114, 5.4.29, 5.5.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.