CVE-2020-35519 PUBLISHED

An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

EPSS 0.17% · 37.9th percentile

Risk Scores

EPSS Score
0.17%
37.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-aws-hwe4.15.0-1030.31~16.04.1, 4.15.0-1039.41~16.04.1, 4.15.0-1036.38~16.04.1
Ubuntu:Pro:FIPS-updates:20.04:LTSlinux-azure-fips5.4.0-1022.22+fips1, 0
Ubuntu:Pro:FIPS:18.04:LTSlinux-gcp-fips0, 4.15.0-1001.1
Ubuntu:16.04:LTSlinux-aws4.4.0-1038.47, 4.4.0-1037.46, 4.4.0-1035.44
Ubuntu:20.04:LTSlinux-riscv-5.80, 5.8.0-16.18~20.04.1, 5.8.0-14.16~20.04.3
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-fips4.15.0-1039.44, 4.15.0-1038.43, 4.15.0-1037.42
Ubuntu:18.04:LTSlinux-hwe-edge5.3.0-22.24~18.04.1, 0, 5.0.0-15.16~18.04.1
Ubuntu:Pro:FIPS-updates:20.04:LTSlinux-gcp-fips5.4.0-1021.21+fips1, 0
Ubuntu:18.04:LTSlinux-aws-5.00, 5.0.0-1027.30, 5.0.0-1025.28
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1007.12~18.04.1, 0, 5.0.0-1014.19
Ubuntu:18.04:LTSlinux-azure-4.154.15.0-1104.116, 0, 4.15.0-1082.92
Ubuntu:18.04:LTSlinux-azure-5.45.4.0-1039.41~18.04.1, 5.4.0-1036.38~18.04.1, 5.4.0-1035.36~18.04.1
Ubuntu:16.04:LTSlinux4.4.0-24.43, 4.4.0-28.47, 4.4.0-31.50
Ubuntu:18.04:LTSlinux-aws-5.45.4.0-1035.37~18.04.1, 5.4.0-1037.39~18.04.1, 0
Ubuntu:18.04:LTSlinux-gcp-4.154.15.0-1078.88, 0, 4.15.0-1071.81
Ubuntu:Pro:FIPS:18.04:LTSlinux-fips4.15.0-1011.12, 0
Ubuntu:Pro:FIPS:20.04:LTSlinux-azure-fips5.4.0-1022.22+fips1, 0
Ubuntu:18.04:LTSlinux-oem4.15.0-1067.77, 4.15.0-1069.79, 4.15.0-1073.83
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-134.160~14.04.1, 0, 4.4.0-13.29~14.04.1

…and 57 more

Timeline

References

Open in Interactive Console →