CVE-2020-25668: Race Condition
A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25668?
CVE-2020-25668 has been classified as a medium severity vulnerability in the Linux Kernel.
How do I fix CVE-2020-25668?
To fix CVE-2020-25668, update the Linux Kernel to version 5.10.223-1 or later.
Which versions of the Linux Kernel are affected by CVE-2020-25668?
CVE-2020-25668 affects Linux Kernel versions up to 4.4.242 and several versions between 4.5 and 5.9.5.
What type of vulnerability is CVE-2020-25668?
CVE-2020-25668 is a use-after-free vulnerability that occurs due to improper synchronization.
Is there an exploit available for CVE-2020-25668?
While there may not be widely reported exploits specifically targeting CVE-2020-25668, the vulnerability poses a risk that could be leveraged by attackers.