CVE-2020-25670: Use After Free
A vulnerability was found in Linux Kernel where refcount leak in llcpsockbind() causing use-after-free which might lead to privilege escalations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25670?
CVE-2020-25670 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2020-25670?
To mitigate CVE-2020-25670, update the Linux kernel to version 5.10.223-1 or later.
What systems are affected by CVE-2020-25670?
CVE-2020-25670 affects multiple versions of the Linux Kernel from 3.6 to 5.11, along with specific releases of Fedora and Debian Linux.
What type of vulnerability is CVE-2020-25670?
CVE-2020-25670 is a refcount leak vulnerability that leads to a use-after-free condition.
Is there any known exploit for CVE-2020-25670?
While there may not be a public exploit, the vulnerability's nature allows for potential privilege escalation when exploited.