CVE-2020-14351

State: Published
Severity: Not scored
Published: Dec 3, 2020
Updated: Aug 4, 2024
Reserved: Jun 17, 2020

Description

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Scores

The record has no CVSS score.

Weaknesses

CWE-416

Affected Products

Product	Versions
kerneln/a	kernel 5.8.17Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1862849
[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security updatemailing-list
[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security updatemailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.