VDB
DEBIAN-CVE-2020-25221
DEBIAN-CVE-2020-25221
PUBLISHED
CVSS 7.800000190734863 HIGH
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Risk Scores
CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | linux | 0, 0, 0 |
| Debian:12 | linux | 0, 0, 0 |
| Debian | linux | |
| Debian:11 | linux | 0, 0, 0 |
| Debian:13 | linux | 0, 0, 0 |
Timeline
- Sep 10, 2020 CVE Published
- Apr 28, 2026 CVE Updated