CVE-2020-28941: Medium severity Linux Linux kernel vulnerability
Published Nov 19, 2020
·Updated
An issue was discovered in drivers/accessibility/speakup/spkttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.
Affected Software
5 affected componentsFixes available
Linux Linux kernel<=5.9.9
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Debian Debian Linux=9.0
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Remediation
Patch Available
Patch Available
Event History
Nov 19, 2020
CVE Published
via MITRE·03:23 PM
Data Sourced
via MITRE·03:23 PM
Description
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:50 PM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·04:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-28941?
CVE-2020-28941 has a severity rating categorized as medium.
2
How do I fix CVE-2020-28941?
To fix CVE-2020-28941, update the Linux kernel to version 5.10 or higher.
3
Which Linux kernel versions are affected by CVE-2020-28941?
CVE-2020-28941 affects Linux kernel versions up to and including 5.9.9.
4
Can CVE-2020-28941 be exploited remotely?
CVE-2020-28941 cannot be exploited remotely as it requires local access to the system.
5
What type of vulnerability is CVE-2020-28941?
CVE-2020-28941 is classified as a local denial of service vulnerability.