PT-2020-1607 · Linux+5 · Linux Kernel+5
Tristan Madani
·
Published
2020-01-30
·
Updated
2021-12-30
·
CVE-2020-8647
CVSS v2.0
6.2
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.5.2
Description
The issue is related to a use-after-free vulnerability in the
vc do resize function, located in drivers/tty/vt/vt.c, which can lead to the disclosure of protected information or cause a denial of service. This vulnerability is associated with the improper use of memory after it has been freed.Recommendations
For Linux kernel versions through 5.5.2, update to a version later than 5.5.2 to resolve the issue. As a temporary workaround, consider restricting access to the
vc do resize function in the drivers/tty/vt/vt.c file to minimize the risk of exploitation.Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linux Kernel
Red Hat
Suse