CVE-2020-27067 PUBLISHED

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173

EPSS 0.02% · 5.1th percentile

Risk Scores

EPSS Score
0.02%
5.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp4.15.0-1021.22, 4.15.0-1032.34, 4.15.0-1028.29
Ubuntu:20.04:LTSlinux-raspi20, 5.3.0-1014.16, 5.4.0-1006.6
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:20.04:LTSlinux-riscv5.4.0-30.34, 5.4.0-27.31, 5.4.0-33.37
Ubuntu:18.04:LTSlinux-azure5.0.0-1016.17~18.04.1, 4.15.0-1037.39, 0
Ubuntu:Pro:14.04:LTSlinux3.13.0-172.223, 3.13.0-175.226, 3.13.0-176.227
Ubuntu:18.04:LTSlinux-oracle-5.3*, 5.3.0-1030.32~18.04.1, 5.3.0-1027.29~18.04.1
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-14.30~14.04.2, 4.4.0-93.116~14.04.1, 4.4.0-96.119~14.04.1
Ubuntu:16.04:LTSlinux-aws4.4.0-1081.91, 4.4.0-1060.69, 4.4.0-1061.70
Ubuntu:16.04:LTSlinux-azure4.13.0-1005.7, 4.13.0-1007.9, 4.13.0-1009.12
Ubuntu:18.04:LTSlinux-azure-5.3*, 5.3.0-1013.14~18.04.1, 5.3.0-1012.13~18.04.1
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1079.84, 4.4.0-1084.89, 4.4.0-1087.92
Ubuntu:16.04:LTSlinux4.4.0-51.72, 0, 4.2.0-17.21
Ubuntu:18.04:LTSlinux-hwe5.3.0-65.59, *, *
Ubuntu:22.04:LTSlinux-riscv5.13.0-1007.7+22.04.1, 5.15.0-1018.21, *
Ubuntu:18.04:LTSlinux-gcp-edge5.0.0-1011.11~18.04.1, 4.18.0-1015.16~18.04.1, 4.18.0-1013.14~18.04.1
Ubuntu:16.04:LTSlinux-hwe0, 4.8.0-46.49~16.04.1, 4.8.0-45.48~16.04.1
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1067.70+cvm1.1, *, 5.4.0-1103.109+cvm1.1
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1005.5, 4.4.0-1034.39, 0
Ubuntu:16.04:LTSlinux-gcp4.10.0-1008.8, 4.13.0-1012.16, 4.13.0-1002.5

…and 14 more

Timeline

References

Open in Interactive Console →