CVE-2020-25220

Katalog CVE

CVSS 7.8 · High EPSS 0,45%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature.

Rincian

Terbit di NVD

10 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.194 release notes · advisory vendor
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.140 release notes · advisory vendor
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.233 release notes · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=82fd2138a5ffd7e0d43... issue tracking · patch · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1868453 issue tracking · patch · advisory pihak ketiga
• https://www.spinics.net/lists/stable/msg405099.html mailing list · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20201001-0004/ advisory pihak ketiga