medium5.7
CVE-2020-27825
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1).
Impact
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Version 5.10 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0 |
| Redhat | Enterprise Mrg | Version 2.0 |
| Debian | Debian Linux | Versions 9.0, 10.0 |
| Netapp | Cloud Backup | All versions |
| Netapp | Solidfire Baseboard Management Controller Firmware | All versions |
| Netapp | H410c Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=1905155
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://security.netapp.com/advisory/ntap-20210521-0008/
- https://www.debian.org/security/2021/dsa-4843
- https://bugzilla.redhat.com/show_bug.cgi?id=1905155
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://security.netapp.com/advisory/ntap-20210521-0008/
- https://www.debian.org/security/2021/dsa-4843