CVE-2020-27820: Use After Free
A vulnerability was found in kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).
Other sources
A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).
Affected Software
Remediation
Information
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-27820?
CVE-2020-27820 has been classified as a high severity vulnerability due to the potential for exploitation leading to denial of service.
How do I fix CVE-2020-27820?
To remediate CVE-2020-27820, you should upgrade to the patched versions of the kernel, specifically kernel-rt or kernel versions 0:4.18.0-372.9.1.rt7.166.el8 or 0:4.18.0-372.9.1.el8.
Which software is affected by CVE-2020-27820?
CVE-2020-27820 affects several versions of the Linux kernel, specifically versions between 2.6.12 and 5.15.5.
Is there a known workaround for CVE-2020-27820?
Currently, there are no effective workarounds recommended for CVE-2020-27820, and patching is the advised course of action.
What type of vulnerability is CVE-2020-27820?
CVE-2020-27820 is a use-after-free vulnerability that occurs in the nouveau driver's postclose() handler within the Linux kernel.