CVE-2020-29371: Low severity linux kernel vulnerability
Published Nov 28, 2020
·Updated
An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.
Affected Software
2 affected componentsFixes available
Linux Linux kernel<5.8.4
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Nov 28, 2020
CVE Published
via MITRE·06:19 AM
Data Sourced
via MITRE·06:19 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:50 PM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·03:43 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-29371?
CVE-2020-29371 has a medium severity rating due to the potential for information leak through uninitialized memory.
2
How do I fix CVE-2020-29371?
To resolve CVE-2020-29371, upgrade your Linux kernel to version 5.10.223-1 or later, or to any version above 5.8.4 that includes the fix.
3
What software is affected by CVE-2020-29371?
CVE-2020-29371 affects the Linux kernel versions prior to 5.8.4.
4
What type of vulnerability is CVE-2020-29371?
CVE-2020-29371 is categorized as a memory leak vulnerability that can expose uninitialized memory to user space.
5
When was CVE-2020-29371 last updated?
CVE-2020-29371 was last updated on 29 November 2024.