CVE-2020-25656CWE-416

A flaw was found in the Linux kernel

published December 2, 2020

CVSS
—
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Weakness
CWE-416 · Use After Free
Published
2020-12-02T00:00Z
EPSS history
Timeline
  • 02 DEC 00:00Z
    A flaw was found in the Linux kernel
    cvelistv5