CVE-2020-10774CWE-805
A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features…
published May 27, 2021
What it is
A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00265 · 17.4th percentile
- Weakness
- CWE-805 · Buffer Access with Incorrect Length Value
- Published
- 2021-05-27T18:46Z
EPSS history
Timeline