CVE-2020-25671Use After Free in Kernel

CWE-416Use After Free15 documents8 sources
Severity
7.8HIGHNVD
OSV3.5
EPSS
0.1%
top 69.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 26
Latest updateMay 24

Description

A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

NVDlinux/linux_kernel3.64.4.267+6
Debianlinux/linux_kernel< 5.10.38-1+3
Ubuntulinux/linux_kernel< 5.4.0-74.83+1
CVEListV5linux/linux_kernelAll
debiandebian/linux< linux 5.10.38-1 (bookworm)

Also affects: Debian Linux 9.0, Fedora 32, 33, 34

Patches

🔴Vulnerability Details

7
GHSA
GHSA-857m-9c4p-fvf4: A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalatio2022-05-24
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities2022-03-22
OSV
linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities2021-06-23
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.2021-06-08
OSV
CVE-2020-25671: A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalatio2021-05-26

📋Vendor Advisories

5
Ubuntu
Linux kernel vulnerabilities2022-03-22
Ubuntu
Linux kernel vulnerabilities2021-06-23
Ubuntu
Linux kernel (OEM) vulnerabilities2021-05-11
Red Hat
kernel: refcount leak in llcp_sock_connect()2020-11-01
Debian
CVE-2020-25671: linux - A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_co...2020

💬Community

2
Bugzilla
CVE-2020-25671 kernel: refcount leak in llcp_sock_connect() [fedora-all]2020-11-04
Bugzilla
CVE-2020-25671 kernel: refcount leak in llcp_sock_connect()2020-11-04
CVE-2020-25671 — Use After Free in Linux Kernel | cvebase