Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Kircher

#45606of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2020-3071
5.5
2020-05-04
Linux · Linux Kernel · CVE-2020-12656
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 5.6.10 **Description** The issue is related to a memory leak in the Linux kernel's rpcsec gss krb5 implementation, specifically in the `gss mech free` function. This leak occurs when unloading a specific kernel module, but it's noted that loading kernel modules is a privileged operation. The issue was disputed with the assertion that it does not grant any access not already available, as a user could also write a kernel module to consume any amount of memory and load it, replicating the effect of this bug. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.