4.6
CVSSv2

CVE-2020-14390

Published: 18/09/2020 Updated: 02/11/2020
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.6 | Impact Score: 4.7 | Exploitability Score: 0.8
VMScore: 410
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A flaw was found in the Linux kernel in versions prior to 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

linux linux kernel 5.9.0

debian debian linux 9.0

Vendor Advisories

In the Linux kernel 5021 and 5311, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cachec because the pointer to a left data structure can be the same as the pointer to a right data structure (CVE-2019-19448) ...
A flaw was found in the Linux kernel When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service Due to the nature of the flaw, privilege escalation cannot be fully ruled out (CVE-2020-14390) A flaw was found in the capabilities check of the rados block device functionality in the Linux ...
A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does not correctly manage the lifetime of internal data structures used An attacker could use this flaw to corrupt memory or escalate privileges (CVE-2019-19448) A use-after-free flaw was found in the debugfs_remove function in the Linux kernel ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> CVE-2020-14390: Linux kernel: slab-out-of-bounds in fbcon <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Minh Yu ...