CVE-2020-25668
- State
- Published
- Severity
- Not scored
- Published
- May 26, 2021
- Updated
- Aug 4, 2024
- Reserved
- Sep 16, 2020
Description
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
Scores
The record has no CVSS score.
Weaknesses
- CWE-362 > CWE-416
Affected Products
| Product | Versions |
|---|---|
Linux Kerneln/a |
|
References
- [oss-security] 20201030 CVE-2020-25668: Linux kernel concurrency use-after-free in vtmailing-list
- [oss-security] 20201104 Re: CVE-2020-25668: Linux kernel concurrency use-after-free in vtmailing-list
- [debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security updatemailing-list
- [debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security updatemailing-list
- https://www.openwall.com/lists/oss-security/2020/11/04/3%2C
- https://www.openwall.com/lists/oss-security/2020/10/30/1%2C
- https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220
- https://security.netapp.com/advisory/ntap-20210702-0005/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.