CVE-2020-14386CWE-250CWE-787

A flaw was found in the Linux kernel before 5.9-rc4

Medium · published September 16, 2020

CVSS v3.1
6.7
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01308 · 70.4th percentile
Weaknesses
CWE-250 · Execution with Unnecessary Privileges; CWE-787 · Out-of-bounds Write
Published
2020-09-16T12:48Z
EPSS history
Timeline
  • 16 SEP 12:48Z
    A flaw was found in the Linux kernel before 5.9-rc4
    cvelistv5