CVE-2020-14386

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.9-rc4

Description A flaw in the Linux kernel allows memory corruption to be exploited, potentially granting root privileges to unprivileged processes. This poses a significant threat to data confidentiality and integrity. The vulnerability is related to the AF PACKET socket implementation and can be exploited by a local unprivileged user to execute code with root privileges or escape from isolated containers if root access is available.

Recommendations For Linux kernel versions prior to 5.9-rc4, update to a version 5.9-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the AF PACKET socket implementation to minimize the risk of exploitation.