CVE-2020-36694

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.

• CWE-416
• CWE-416

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10Release Notes
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12Release Notes
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc00bcaa589914096edef7fb87ca5cee4a166b5cMailing List, Patch
• https://security.netapp.com/advisory/ntap-20230622-0005/
• https://syzkaller.appspot.com/bug?id=0c4fd9c6aa04ec116d01e915d3b186f71a212cb2Exploit, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10Release Notes
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12Release Notes
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc00bcaa589914096edef7fb87ca5cee4a166b5cMailing List, Patch
• https://security.netapp.com/advisory/ntap-20230622-0005/
• https://syzkaller.appspot.com/bug?id=0c4fd9c6aa04ec116d01e915d3b186f71a212cb2Exploit, Third Party Advisory

Published

May 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3667u'Buffer Overflow in mic calculation for WPA due to copying …9.8
• CVE-2020-36670The NEX-Forms. plugin for WordPress is vulnerable to unautho…6.3
• CVE-2020-3668u'Buffer overflow while parsing PMF enabled MCBC frames due …9.8
• CVE-2020-3669u'Buffer Overflow issue in WLAN tcp ip verification due to u…9.8
• CVE-2020-36691An issue was discovered in the Linux kernel before 5.8. lib/…5.5
• CVE-2020-36692A reflected XSS via POST vulnerability in report scheduler o…5.4
• CVE-2020-36695Incorrect Default Permissions vulnerability in Hitachi Devic…7.8
• CVE-2020-36696The Product Input Fields for WooCommerce plugin for WordPres…7.5
• CVE-2020-36697The WP GDPR plugin for WordPress is vulnerable to authorizat…6.5
• CVE-2020-36698The Security & Malware scan by CleanTalk plugin for WordPres…8.8
• CVE-2020-36699The Quick Page/Post Redirect Plugin for WordPress is vulnera…4.3
• CVE-2020-3670u'Potential out of bounds read while processing downlink NAS…9.1