VDB

DEBIAN-CVE-2020-25221

DEBIAN-CVE-2020-25221 PUBLISHED CVSS 7.800000190734863 HIGH

get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:14linux0, 0, 0
Debian:12linux0, 0, 0
Debianlinux
Debian:11linux0, 0, 0
Debian:13linux0, 0, 0

Timeline

  • Sep 10, 2020 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›