Linux · Linux Kernel · CVE-2020-12656
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions through 5.6.10
**Description**
The issue is related to a memory leak in the Linux kernel's rpcsec gss krb5 implementation, specifically in the `gss mech free` function. This leak occurs when unloading a specific kernel module, but it's noted that loading kernel modules is a privileged operation. The issue was disputed with the assertion that it does not grant any access not already available, as a user could also write a kernel module to consume any amount of memory and load it, replicating the effect of this bug.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.