CVE-2020-28941

Katalog CVE

CVSS 5.5 · Medium EPSS 0,33%

Kerentanan Release of Invalid Pointer or Reference pada linux kernel, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.

Rincian

Terbit di NVD

19 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-763: Release of Invalid Pointer or Reference

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 25,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4122754442799187d5d537a9c039a49a67... patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git/commit/?h=tty-linus&id=d4122754442799187d5d537a... patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2020/11/19/5 mailing list · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/d4122754442799187d5d537a9c039a49a67e57f1 patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2020/11/19/3 mailing list · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJX...