NetSight
IP …
high7.8

CVE-2020-14356

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system.

Impact

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.5 before 4.9.231
from 4.10 before 4.14.189
from 4.15 before 4.19.134
from 4.20 before 5.4.53
from 5.5 before 5.7.10
RedhatEnterprise Linux
Version 8.0
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Version 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions

Weakness classification

CWE-476

References