CVE-2020-36385

25

FAUCET Score

CVE-2020-36385 is a use-after-free vulnerability in the Linux kernel (before version 5.10) within the Infiniband core driver (ucma.c), affecting Linux, NetApp, and StarWindSoftware products. It carries a high CVSS score of 7.8, indicating that an attacker could achieve high confidentiality, integrity, and availability impact through a local attack requiring user interaction. Despite its severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it has garnered no community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 5.10CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:netapp:h300s_firmware:-:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:netapp:h500s_firmware:-:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:netapp:h700s_firmware:-:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:o:netapp:h300e_firmware:-:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.48%

Probability of exploitation in next 30 days

EPSS Percentile

71.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0148 is in the 70th percentile among its peer group of 11,616 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6 Extended Lifecycle SupportFixed in: kernel-0:2.6.32-754.43.1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-1160.49.1.rt56.1189.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-1160.49.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.2 Advanced Update SupportFixed in: kernel-0:3.10.0-327.102.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.3 Advanced Update SupportFixed in: kernel-0:3.10.0-514.95.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: kernel-0:3.10.0-693.95.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: kernel-0:3.10.0-957.86.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Telco Extended Update SupportFixed in: kernel-0:3.10.0-957.86.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Update Services for SAP SolutionsFixed in: kernel-0:3.10.0-957.86.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.59.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Telco Extended Update SupportFixed in: kernel-0:3.10.0-1062.59.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Update Services for SAP SolutionsFixed in: kernel-0:3.10.0-1062.59.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-305.25.1.rt7.97.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-305.25.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: kernel-0:4.18.0-147.57.1.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: kernel-rt-0:4.18.0-193.70.1.rt13.120.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: kernel-0:4.18.0-193.70.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: redhat-virtualization-host-0:4.3.20-20211202.1.el7_9

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-alt

Vendor Advisories (1)

redhatCVE-2020-36385Important

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

References

cdn.kernel.org / pub/linux/kernel/v5.x/ChangeLog-5.10

Release NotesVendor Advisory

git.kernel.org / pub/scm/linux/kernel/git/torvalds/linux.git/commit

PatchVendor Advisory

security.netapp.com / advisory/ntap-20210720-0004

Third Party Advisory

sites.google.com / view/syzscope/kasan-use-after-free-read-in-ucma_close-2

PatchThird Party Advisory

syzkaller.appspot.com / bug

PatchThird Party Advisory

starwindsoftware.com / security/sw-20220802-0002

Third Party Advisory