5.5
CVSSv3

CVE-2020-24385

Published: 03/09/2020 Updated: 11/09/2020
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

In MidnightBSD prior to 1.2.6 and 1.3 before August 2020, and FreeBSD prior to 7, a NULL pointer dereference was found in the Linux emulation layer that allows malicious users to crash the running kernel. During binary interaction, td->td_emuldata in sys/compat/linux/linux_emul.h is not getting initialized and returns NULL from em_find().

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

midnightbsd midnightbsd

freebsd freebsd