CVE-2020-25641CWE-835

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7

published October 6, 2020

CVSS
—
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.4th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2020-10-06T13:33Z
EPSS history
Timeline
  • 06 OCT 13:33Z
    A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7
    cvelistv5