PT-2020-6662 · Linux+4 · Linux Kernel+4
Bodong Zhao
+1
·
Published
2020-11-01
·
Updated
2024-06-15
·
CVE-2020-25668
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 5.9.2
Description
The issue is related to a use-after-free flaw in the Linux Kernel's tty subsystem, which can be exploited to gain access to sensitive information or cause a denial of service. The problem arises from improper synchronization of access to the global variable
fg console, leading to a use-after-free condition in con font op.Recommendations
For Linux Kernel versions prior to 5.9.2, update to a version that includes the fix for this issue to prevent exploitation.
As a temporary workaround, consider restricting access to the
con font op function until a patch is available.Exploit
Fix
Race Condition
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Linuxmint
Suse
Ubuntu