CVE-2020-25669 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Information disclosure |
| Description | A use-after-free read in the Linux kernel before 5.9.10 could be used by local attackers to read privileged information or potentially crash the kernel. The function sunkbd_reinit was scheduled by sunkbd_interrupt before the struct sunkbd was freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing use-after-free. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1314 | linux | 5.9.9.arch1-1 | 5.9.10.arch1-1 | Medium | Fixed |