CVE-2020-27825medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
References
https://bugzilla.redhat.com/show_bug.cgi?id=1905155
https://www.debian.org/security/2021/dsa-4843
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
Details
Source: MITRE
Published: 2020-12-11
Updated: 2021-05-21
Type: CWE-362
Risk Information
CVSS v2
Base Score: 5.4
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:C
Impact Score: 7.8
Exploitability Score: 3.4
Severity: MEDIUM
CVSS v3
Base Score: 5.7
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H
Impact Score: 5.2
Exploitability Score: 0.5
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*
Configuration 3
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 157144 | SUSE SLES15 Security Update : kernel (SUSE-SU-2022:0197-1) | Nessus | SuSE Local Security Checks | medium |
| 147532 | Debian DLA-2586-1 : linux security update | Nessus | Debian Local Security Checks | high |
| 146631 | Amazon Linux 2 : kernel (ALAS-2021-1600) | Nessus | Amazon Linux Local Security Checks | high |
| 146569 | Amazon Linux AMI : kernel (ALAS-2021-1480) | Nessus | Amazon Linux Local Security Checks | high |
| 146512 | Debian DLA-2557-1 : linux-4.19 security update | Nessus | Debian Local Security Checks | high |
| 146511 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0452-1) | Nessus | SuSE Local Security Checks | high |
| 146476 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0437-1) | Nessus | SuSE Local Security Checks | high |
| 146474 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1) | Nessus | SuSE Local Security Checks | high |
| 146470 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0434-1) | Nessus | SuSE Local Security Checks | high |
| 146282 | openSUSE Security Update : RT kernel (openSUSE-2021-242) | Nessus | SuSE Local Security Checks | high |
| 146052 | Debian DSA-4843-1 : linux - security update | Nessus | Debian Local Security Checks | high |
| 145320 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-60) | Nessus | SuSE Local Security Checks | medium |
| 145287 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-75) | Nessus | SuSE Local Security Checks | medium |
| 145120 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0133-1) | Nessus | SuSE Local Security Checks | medium |
| 145025 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0117-1) | Nessus | SuSE Local Security Checks | medium |
| 145018 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0118-1) | Nessus | SuSE Local Security Checks | medium |
| 144959 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1) | Nessus | SuSE Local Security Checks | medium |
| 144914 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0098-1) | Nessus | SuSE Local Security Checks | high |
| 144908 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0095-1) | Nessus | SuSE Local Security Checks | medium |