CVE-2020-25285

—

CVSS 3.1

6.4 medium

EPSS

<1%p19

Published

Sep 13, 2020 (Sep 13, 2020)

Modified

Jun 17, 2026

Description

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812.

Vendors: linux debian canonical
Products: linux kernel, debian linux, ubuntu linux
Weakness: CWE-362, CWE-476, CWE-787
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.