VDB
CVE-2020-14381
CVE-2020-14381
PUBLISHED
CVSS 7.800000190734863 HIGH
A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
EPSS 0.83% · 57.4th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.83%
57.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-oracle | 4.15.0-1018.20, 4.15.0-1009.11, 4.15.0-1010.12 |
| Ubuntu:18.04:LTS | linux | 4.13.0-25.29, 4.13.0-17.20, 4.13.0-16.19 |
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1013.14, 4.4.0-1126.132, 4.4.0-1135.143 |
| Ubuntu:18.04:LTS | linux-gke-5.3 | 5.3.0-1011.12~18.04.1, 5.3.0-1012.13~18.04.1, 5.3.0-1014.15~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1012.13~18.04.1, 5.3.0-1013.14~18.04.1, 5.3.0-1016.17~18.04.1 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.4.0-1006.6, 5.4.0-1004.4, 5.3.0-1014.16 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-azure-fips | 0, 4.15.0-1002.2 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-gcp-fips | 0, 4.15.0-1001.1 |
| Ubuntu:20.04:LTS | linux-azure-fde | 5.4.0-1085.90+cvm2.1, 0, * |
| Ubuntu:18.04:LTS | linux-snapdragon | 4.15.0-1054.58, 4.15.0-1055.59, 4.15.0-1058.64 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 5.0.0-1008.13~18.04.1, 5.0.0-1014.19, 5.0.0-1011.16 |
| Ubuntu:16.04:LTS | linux-aws | 4.4.0-1017.26, 4.4.0-1096.107, 4.4.0-1095.106 |
| Ubuntu:18.04:LTS | linux-hwe-edge | *, *, * |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 5.3.0-1017.18~18.04.1, 5.3.0-1019.21~18.04.1, 0 |
| Ubuntu:16.04:LTS | linux-raspi2 | 4.4.0-1095.103, 4.4.0-1114.123, 4.4.0-1117.126 |
| Ubuntu:18.04:LTS | linux-gcp | 5.0.0-1034.35, 0, 4.15.0-1001.1 |
| Ubuntu:Pro:20.04:LTS | linux-azure-fde-5.15 | 5.15.0-1050.57~20.04.1.1, 5.15.0-1047.54~20.04.1.1, 5.15.0-1046.53~20.04.1.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-fips | 4.15.0-1027.32, 0 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-azure-fips | 4.15.0-1002.2, 0 |
| Ubuntu:18.04:LTS | linux-gcp-edge | 0, *, 5.0.0-1011.11~18.04.1 |
…and 34 more
Timeline
- Oct 11, 2020 CVE Published
- Nov 10, 2020 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 7, 2022 EPSS Score
- Jul 9, 2022 EPSS Score
- Nov 14, 2022 EPSS Score
- Jan 17, 2023 EPSS Score
References
- https://git.kernel.org/linus/8019ad13ef7f64be44d4f892af9c840179009254 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-14381 third-party-advisory
- https://ubuntu.com/security/CVE-2020-14381 advisory