NetSight
IP …
high7.0

CVE-2020-25212

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other…

Impact

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.8.3
DebianDebian Linux
Version 9.0
OpensuseLeap
Versions 15.1, 15.2
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04

Weakness classification

CWE-367CWE-787

References