CVE-2020-0427 PUBLISHED

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171

EPSS 0.17% · 38.3th percentile

Risk Scores

EPSS Score
0.17%
38.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-oem0, 4.15.0-1002.3, 4.15.0-1004.5
Ubuntu:16.04:LTSlinux-kvm4.4.0-1007.12, 4.4.0-1004.9, 0
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1024.26~18.04.1, 0, 5.3.0-1011.12~18.04.1
Ubuntu:18.04:LTSlinux-oracle4.15.0-1021.23, 4.15.0-1017.19, 4.15.0-1015.17
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:18.04:LTSlinux-aws4.15.0-1025.25, 4.15.0-1029.30, 4.15.0-1031.33
Ubuntu:Pro:FIPS:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:16.04:LTSlinux-raspi24.4.0-1129.138, 4.2.0-1014.21, 4.2.0-1013.19
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1078.81+cvm1.1, 5.4.0-1076.79+cvm1.1, 5.4.0-1074.77+cvm1.1
Ubuntu:16.04:LTSlinux-gcp4.15.0-1015.15~16.04.1, 4.15.0-1032.34~16.04.1, 4.15.0-1033.35~16.04.1
Ubuntu:18.04:LTSlinux-azure4.15.0-1022.23, 0, 4.15.0-1002.2
Ubuntu:20.04:LTSlinux-gke5.4.0-1096.103, 5.4.0-1105.112, 5.4.0-1104.111
Ubuntu:Pro:FIPS:18.04:LTSlinux-azure-fips4.15.0-1002.2, 0
Ubuntu:18.04:LTSlinux4.15.0-55.60, 4.15.0-58.64, 4.15.0-60.67
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1010.13, 4.4.0-1043.48, 4.4.0-1044.49
Ubuntu:18.04:LTSlinux-oem-osp15.0.0-1015.16, 5.0.0-1018.20, 5.0.0-1020.22
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1017.18~18.04.1, 0, 5.3.0-1008.9~18.04.1
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1014.19, 5.0.0-1013.18, 5.0.0-1011.16
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1010.10, 4.4.0-1009.9, 4.4.0-1006.6
Ubuntu:16.04:LTSlinux-hwe4.15.0-34.37~16.04.1, 0, 4.8.0-36.36~16.04.1

…and 33 more

Timeline

References

Open in Interactive Console →