CVE-2020-35519

Related Vulnerabilities: CVE-2020-35519  

An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Description

An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Statement

There was no shipped kernel version affected by this problem. These files are not built in our source code.

There was no shipped kernel version affected by this problem. These files are not built in our source code.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Additional Information

  • Bugzilla 1908251: CVE-2020-35519 kernel: x25_bind out-of-bounds read
  • CWE-125: Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2020-35519