CVE-2020-0427: Use After Free
A flaw was found in the Linux pinctrl system. It is possible to trigger an of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed.
Other sources
A flaw was found in the Linux pinctrl system. It is possible to trigger an of bounds read due to a useafter free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=be4c60b563edee3712d392aaeb0943a768df7023
— Red Hat
In createpinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-0427?
CVE-2020-0427 has a medium severity level due to its potential for local information disclosure.
How do I fix CVE-2020-0427?
To fix CVE-2020-0427, upgrade to the patched versions of the kernel available for your distribution.
What software is affected by CVE-2020-0427?
CVE-2020-0427 affects various Linux kernel versions across distributions such as Red Hat, Debian, and openSUSE.
What type of vulnerability is CVE-2020-0427?
CVE-2020-0427 is a use-after-free vulnerability that can lead to an out-of-bounds read.
Can CVE-2020-0427 be exploited remotely?
CVE-2020-0427 requires local access for exploitation, making remote exploitation unlikely.