Use After Free Vulnerability in Fedora Linux Kernel by Fedora
CVE-2020-27418

4.4MEDIUM

Key Information:

Vendor

Fedoraproject

Status
Fedora Linux Kernel
Vendor
CVE Published:
22 August 2023

What is CVE-2020-27418?

The Fedora Linux kernel 5.9.0-rc9 has a significant vulnerability categorized as Use After Free, which occurs in the vgacon_invert_region() function. This flaw potentially allows attackers to access sensitive information, posing a risk to system security and user data integrity. It is crucial for users and administrators of affected Fedora systems to implement necessary patches and updates to mitigate these security concerns.

References

http://fedora.com
https://patchwork.freedesktop.org/patch/356372/

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-27418 : Use After Free Vulnerability in Fedora Linux Kernel by Fedora