CVE-2020-25673: Medium severity Linux Linux kernel vulnerability
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect() leads to leak and eventually hanging-up the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25673?
CVE-2020-25673 is classified as a high severity vulnerability due to its potential to cause system hangs.
How do I fix CVE-2020-25673?
To address CVE-2020-25673, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What affected software is impacted by CVE-2020-25673?
CVE-2020-25673 affects Linux kernel versions up to 5.3.18 and specific versions of Fedora up to 34.
What kind of attack can leverage CVE-2020-25673?
CVE-2020-25673 can be exploited through non-blocking socket connections, potentially leading to denial of service.
Is CVE-2020-25673 specific to any Linux distributions?
Yes, CVE-2020-25673 specifically impacts several versions of Fedora and the Linux kernel.