PT-2020-5281 · Linux+1 · Linux Kernel+1
Adam Zabrocki
+1
·
Published
2020-10-15
·
Updated
2022-09-02
·
CVE-2020-27825
CVSS v3.1
5.7
Medium
| Vector | AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.10-rc1
Description
A use-after-free flaw was found in kernel/trace/ring buffer.c, which could cause a denial of service problem due to a race condition in trace open and resize of cpu buffer running in parallel on different CPUs. This issue may also allow a local attacker with special user privileges to leak kernel information.
Recommendations
For Linux kernel versions prior to 5.10-rc1, update to version 5.10-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the kernel/trace/ring buffer.c component to minimize the risk of exploitation.
Fix
DoS
Race Condition
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Suse