CVE-2020-25221

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.7.x through 5.8.6

Description The issue is related to incorrect reference counting of the struct page that backs the vsyscall page, caused by gate page mishandling in the get gate page function in mm/gup.c. This results in a refcount underflow, allowing privilege escalation. The issue can be triggered by any 64-bit process that can use ptrace() or process vm readv().

Recommendations For Linux kernel versions 5.7.x through 5.8.6, update to version 5.8.7 or later to resolve the issue.