NetSight
high7.8

CVE-2020-13974

An issue was discovered in the Linux kernel 4.4 through 5.7.1.

Impact

An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.227
from 4.5 before 4.9.227
from 4.10 before 4.14.184
from 4.15 before 4.19.128
from 4.20 before 5.4.46
from 5.5 before 5.6.18
DebianDebian Linux
Version 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04

Weakness classification

References