CVE-2020-36558CWE-362CWE-476

CVE-2020-36558

Medium · published July 21, 2022

CVSS v3.1
5.1
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00310 · 22.6th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-476 · NULL Pointer Dereference
Published
2022-07-21T08:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 5.5.75.5.7
References (4)
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 JUL 03:46Z
    A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault
    cvelistv5