{"id":"CVE-2020-14416","title":"In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824","summary":"In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-362","CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 5.4.16","leap = 15.1","leap = 15.2"],"patched":["linux_kernel 5.4.16"],"published":"2020-06-18","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:23.767","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-14416","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html","label":"cve@mitre.org"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1162002","label":"cve@mitre.org"},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16","label":"cve@mitre.org"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954dd","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1162002","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954dd","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00309,"epssPercentile":0.21877,"ingestedAt":"2026-10-08T22:11:53.717Z","slug":"CVE-2020-14416","body":"## Overview\n\nIn the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.\n\n## Affected\n\n- `linux_kernel < 5.4.16`\n- `leap = 15.1`\n- `leap = 15.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.4.16`","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}