CVE-2020-0305: Use After Free
A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the chrdevopen function. This flaw allows a privileged local user to starve the resources, causing a denial of service or potentially escalating their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Other sources
In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed.
Reference:
https://android.googlesource.com/kernel/common/+/68faa679b8be1a74e6663c21c3a9d25d3
— Red Hat
In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-0305?
CVE-2020-0305 is classified as a high severity vulnerability due to its potential for privilege escalation and denial of service.
How do I fix CVE-2020-0305?
To mitigate CVE-2020-0305, you should update to the recommended kernel version 0:4.18.0-240.rt7.54.el8 or 0:4.18.0-240.el8 for Red Hat systems.
Which systems are affected by CVE-2020-0305?
CVE-2020-0305 affects multiple Linux distributions including Red Hat, SUSE Linux, and Android 10.0.
What type of vulnerability is CVE-2020-0305?
CVE-2020-0305 is a use-after-free vulnerability that can cause resource starvation and potentially lead to privilege escalation.
Can CVE-2020-0305 be exploited remotely?
CVE-2020-0305 requires local access to exploit, meaning only privileged local users can take advantage of this vulnerability.