CVE-2020-25656

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.

Link	Resource
https://lkml.org/lkml/2020/10/29/528	Mailing List Patch
https://lkml.org/lkml/2020/10/16/84	Exploit Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=1888726	Exploit Issue Tracking
https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	Mailing List Third Party Advisory
https://www.starwindsoftware.com/security/sw-20210325-0006/	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:5.10:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12533:*:*:*:vsphere:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12658:*:*:*:vsphere:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12859:*:*:*:vsphere:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13170:*:*:*:vsphere:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13586:*:*:*:vsphere:*:* cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13861:*:*:*:vsphere:*:*

---

Published : 2020-12-02 01:15

Updated : 2022-10-25 05:03

---

NVD link : CVE-2020-25656

Mitre link : CVE-2020-25656

No products.

CWE-416