CVE-2020-25639
בינונית 4.4
תיאור (מקור, אנגלית)
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.
מדדים
- CVSS 3.1
-
4.4 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-14/10/2026
- CWE
- CWE-476
מוצרים מושפעים
linux: linux kernel; fedoraproject: fedora; redhat: openshift container platform; redhat: enterprise linux; redhat: messaging realtime grid
קישורים
- https://bugzilla.redhat.com/show_bug.cgi?id=1876995 ExploitIssue TrackingThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1876995 ExploitIssue TrackingThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…