CVEvulnerability

CVE-2020-14304

4.4 MEDIUM Published 2020-09-15 Modified 2026-10-07 Official page ↗
Status
Modified
Published
2020-09-15
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-460, CWE-755

Description

A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.

Affected configurations

• linux linux kernel 4.9.210-1 • linux linux kernel 4.19.118-2 • linux linux kernel 5.6.7-1

Related

Weakness · CWE (2)

  • CWE-460 Improper Cleanup on Thrown Exception weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness

References