CVE-2020-14356

Katalog CVE

CVSS 7.8 · High EPSS 1,0%

Kerentanan NULL Pointer Dereference pada linux kernel, redhat enterprise linux +8 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.

Rincian

Terbit di NVD

19 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.kernel.org/show_bug.cgi?id=208003 exploit · issue tracking · advisory vendor
• https://lore.kernel.org/netdev/CAM_iQpUKQJrj8wE+Qa8NGR3P0L+5Uz=qo-O5+k_P60HzTde6aw%40mail.gmail.com/t/ exploit · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1868453 issue tracking · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200904-0002/ advisory pihak ketiga
• https://usn.ubuntu.com/4483-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4484-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4526-1/ advisory pihak ketiga