Published: 18/09/2020 Updated: 02/11/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.6 | Impact Score: 4.7 | Exploitability Score: 0.8

VMScore: 410

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

A flaw was found in the Linux kernel in versions prior to 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 5.9.0
linux linux kernel
debian debian linux 9.0

In the Linux kernel 5021 and 5311, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cachec because the pointer to a left data structure can be the same as the pointer to a right data structure (CVE-2019-19448) ...

A flaw was found in the Linux kernel When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service Due to the nature of the flaw, privilege escalation cannot be fully ruled out (CVE-2020-14390) A flaw was found in the capabilities check of the rados block device functionality in the Linux ...

A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does not correctly manage the lifetime of internal data structures used An attacker could use this flaw to corrupt memory or escalate privileges (CVE-2019-19448) A use-after-free flaw was found in the debugfs_remove function in the Linux kernel ...

Hi, I found a out-of-bound write in fbcon_redraw_softback while the kernel version <= 59rc5 The oldest affected kernel version is 223 The root cause of this vulnerability is that the value of vc->vc_origin is not updated in time while invoking vc_do_resize This is my PoC (need the permission to open and write the tty, and need to hav ...

CWE-787 https://bugzilla.redhat.com/show_bug.cgi?id=1876788 http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2020-1437.html

CVE-2020-14390

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect