CVE-2020-28915 — Out-of-bounds Read in Kernel
Severity
5.8MEDIUMNVD
OSV7.8OSV5.5OSV5.4
EPSS
0.1%
top 69.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 18
Latest updateFeb 14
Description
A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:HExploitability: 0.3 | Impact: 5.5
Affected Packages6 packages
Patches
🔴Vulnerability Details
8GHSA▶
GHSA-v4w4-xxpq-3p77: A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5↗2022-05-24
OSV▶
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 regression↗2020-12-13
OSV▶
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon regression↗2020-12-13
OSV▶
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities↗2020-12-03