Orta CVSS 4.4 PoC var
CVE-2020-25639: Linux Kernel: NULL işaretçi başvurusu
Açıklama (NVD)
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,37 (yüzdelik 31)
- CWE
- CWE-476
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | — | 5.11.2 | — |
| fedoraproject-fedora | 32 | 32 | — |
| fedoraproject-fedora | 33 | 33 | — |
| redhat-openshift-container-platform | 4.4 | 4.4 | — |
| redhat-openshift-container-platform | 4.5 | 4.5 | — |
| redhat-openshift-container-platform | 4.6 | 4.6 | — |
| redhat-enterprise-linux | 5.0 | 5.0 | — |
| redhat-enterprise-linux | 6.0 | 6.0 | — |
| redhat-enterprise-linux | 7.0 | 7.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-messaging-realtime-grid | 2.0 | 2.0 | — |