What’s Vulnerable › Vulnerabilities

CVE-2020-27835

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-07 · updated 2026-06-17
• Weakness: CWE-416

Description

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.

Affected products

• Linux Infiniband Hfi1 Driver: through 5.9; 5.10-rc1, 5.10-rc2, 5.10-rc3, 5.10-rc4, 5.10-rc5

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1901709
• https://bugzilla.redhat.com/show_bug.cgi?id=1901709

Get alerted when CVE-2020-27835 or the next vulnerability affects your stack