CVEvulnerability
CVE-2020-14351
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-12-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected configurations
• linux linux kernel (< 5.8.17)
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1862849 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1862849 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html Mailing List, Third Party Advisory