CVE-2020-29661: Broadcom Fabric Operating System

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

Affected products

• Broadcom Fabric Operating System: affected versions not specified
• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Linux Linux Kernel: from 2.6.26, before 4.4.248 (fixed in 4.4.248); from 4.5, before 4.9.248 (fixed in 4.9.248); from 4.10, before 4.14.212 (fixed in 4.14.212); from 4.15, before 4.19.163 (fixed in 4.19.163); from 4.20, before 5.4.83 (fixed in 5.4.83); from 5.5, before 5.9.14 (fixed in 5.9.14)
• Netapp 8300 Firmware: affected versions not specified
• Netapp 8700 Firmware: affected versions not specified
• Netapp a400 Firmware: affected versions not specified
• Netapp a700s Firmware: affected versions not specified
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified
• Oracle Tekelec Platform Distribution: from 7.4.0, up to and including 7.7.1

Published 2020-12-09. Last modified 2026-06-17.