CVE-2020-27825 Use after free in kernel
A local attacker with special privileges can exploit a race condition in the Linux kernel ring buffer to cause denial of service or leak kernel information.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-27825?
CVE-2020-27825 is a medium-severity use after free vulnerability in Debian Debian Linux, published on 11 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
Weakness: CWE-362
Which versions are affected by CVE-2020-27825?
It affects 7 products.
Products include Debian Debian Linux, Linux kernel, Netapp Cloud Backup, Netapp H410c Firmware, Netapp Solidfire Baseboard Management Controller Firmware, Redhat Enterprise Linux and 1 more.
How do I fix CVE-2020-27825?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2020-27825 being exploited?
There is no known exploitation of CVE-2020-27825 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as A-175769054, DEBIAN-CVE-2020-27825, GHSA-wx9f-x53v-pqrr, PUB-A-175769054, UBUNTU-CVE-2020-27825.