What’s Vulnerable › Vulnerabilities
CVE-2020-27825
- Severity: medium (CVSS 5.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-12-11 · updated 2026-06-17
- Weakness: CWE-362
Description
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
Affected products
- Debian Linux: 9.0, 10.0
- Linux kernel: 5.10-rc1
- NetApp Cloud Backup: all versions
- NetApp H410C Firmware: all versions
- NetApp Solidfire Baseboard Management Controller Firmware: all versions
- Red Hat Enterprise Linux: 7.0, 8.0
- RedHat Enterprise Mrg: 2.0
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1905155
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://security.netapp.com/advisory/ntap-20210521-0008/
- https://www.debian.org/security/2021/dsa-4843
- https://bugzilla.redhat.com/show_bug.cgi?id=1905155
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://security.netapp.com/advisory/ntap-20210521-0008/
- https://www.debian.org/security/2021/dsa-4843
Get alerted when CVE-2020-27825 or the next vulnerability affects your stack