Vulnerability Details : CVE-2020-28941
An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.
Vulnerability category: Denial of service
Products affected by CVE-2020-28941
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-28941
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 16 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-28941
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.9
|
MEDIUM | AV:L/AC:L/Au:N/C:N/I:N/A:C |
3.9
|
6.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2020-28941
-
The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-28941
-
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4122754442799187d5d537a9c039a49a67e57f1
kernel/git/torvalds/linux.git - Linux kernel source treePatch;Vendor Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/
[SECURITY] Fedora 33 Update: kernel-5.9.10-200.fc33 - package-announce - Fedora Mailing-ListsThird Party Advisory
-
https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git/commit/?h=tty-linus&id=d4122754442799187d5d537a9c039a49a67e57f1
kernel/git/gregkh/tty.git - TTY/Serial driver development treePatch;Vendor Advisory
-
https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
[SECURITY] [DLA 2483-1] linux-4.19 security updateMailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2020/11/19/5
oss-security - Re: Linux kernel NULL-ptr deref bug in spk_ttyio_ldisc_closeMailing List;Patch;Third Party Advisory
-
https://www.openwall.com/lists/oss-security/2020/11/19/3
oss-security - Linux kernel NULL-ptr deref bug in spk_ttyio_ldisc_closeMailing List;Patch;Third Party Advisory
-
https://github.com/torvalds/linux/commit/d4122754442799187d5d537a9c039a49a67e57f1
speakup: Do not let the line discipline be used several times · torvalds/linux@d412275 · GitHubPatch;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/
[SECURITY] Fedora 32 Update: kernel-5.9.10-100.fc32 - package-announce - Fedora Mailing-ListsThird Party Advisory
Jump to