PT-2020-16368 · Ethereum · Geth

Slavikus · Published 2020-11-25 · Updated 2025-08-08 · CVE-2020-26240

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Geth versions prior to 1.9.24

Description An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate Proof of Work in an upcoming epoch. This issue is relevant only for miners, as non-mining nodes are unaffected. The flaw was observed on the ETC chain on 2020-11-06.

Recommendations For versions prior to 1.9.24, update to version 1.9.24 or later to resolve the issue. As a temporary workaround, consider restricting mining activities until the update is applied.

Fix

Weakness Enumeration

CWE-682

Related Identifiers

CVE-2020-26240

GHSA-V592-XF75-856P

GO-2022-0775

OPENSUSE-SU-2025:15424-1

Affected Products

Geth

References · 56

• https://github.com/ethereum/go-ethereum/commit/d990df909d7839640143344e79356754384dcdd0 · Patch
• https://github.com/ethereum/go-ethereum/pull/21793 · Patch
• https://osv.dev/vulnerability/CVE-2020-26240 · Vendor Advisory
• https://blog.ethereum.org/2020/11/12/geth_security_release · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26240 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0775 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v592-xf75-856p · Vendor Advisory
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-v592-xf75-856p · Note
• https://github.com/ethereum/go-ethereum · Note
• https://suse.com/security/cve/CVE-2020-8551 · Note
• https://suse.com/security/cve/CVE-2023-2728 · Note
• https://suse.com/security/cve/CVE-2018-1002101 · Note
• https://suse.com/security/cve/CVE-2020-8563 · Note
• https://suse.com/security/cve/CVE-2021-30465 · Note