PT-2020-3944 · Linux+5 · Linux Kernel+5
Minh Yuan
·
Published
2020-09-14
·
Updated
2026-04-21
·
CVE-2020-14390
CVSS v3.1
5.6
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 5.9-rc6
Description:
A flaw in the Linux kernel can cause an out-of-bounds memory write when changing screen size, leading to memory corruption or a denial of service. The primary threat of this issue is system availability. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. The vulnerability is related to the
fbcon redraw softback function and involves a buffer overflow, which can be exploited to cause a denial of service.Recommendations:
For Linux kernel versions prior to 5.9-rc6, update to version 5.9-rc6 or later to resolve the issue. As a temporary workaround, consider restricting screen size changes to minimize the risk of exploitation.
Exploit
Fix
DoS
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu