CVE-2020-10773CWE-626

A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the…

Medium · published September 10, 2020

CVSS v3.1
4.4
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-626 · Null Byte Interaction Error (Poison Null Byte)
Published
2020-09-10T16:07Z
EPSS history
Timeline
  • 10 SEP 16:07Z
    A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the…
    cvelistv5