CVE-2020-15436: Broadcom Brocade Fabric Operating System Firmware

Medium severity, CVSS 6.7. EPSS: 0.9% chance of exploitation in the next 30 days.

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

Affected products

• Broadcom Brocade Fabric Operating System Firmware: affected versions not specified
• Linux Linux Kernel: from 2.6.38, before 4.4.229 (fixed in 4.4.229); from 4.5, before 4.9.229 (fixed in 4.9.229); from 4.10, before 4.14.186 (fixed in 4.14.186); from 4.15, before 4.19.130 (fixed in 4.19.130); from 4.20, before 5.4.49 (fixed in 5.4.49); from 5.5, before 5.7.6 (fixed in 5.7.6)
• Netapp a250 Firmware: affected versions not specified
• Netapp a700s Firmware: affected versions not specified
• Netapp Aff 500f Firmware: affected versions not specified
• Netapp Aff 8300 Firmware: affected versions not specified
• Netapp Aff 8700 Firmware: affected versions not specified
• Netapp Aff a400 Firmware: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Fabric-Attached Storage a400 Firmware: affected versions not specified
• Netapp Fas 500f Firmware: affected versions not specified
• Netapp Fas 8300 Firmware: affected versions not specified
• Netapp Fas 8700 Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2020-11-23. Last modified 2026-06-17.