CVE-2020-25639

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12-rc1

Description The issue is related to a NULL pointer dereference flaw in the Linux kernel's GPU Nouveau driver. This flaw can be exploited by a local user to crash the system by calling the ioctl function with the DRM IOCTL NOUVEAU CHANNEL ALLOC parameter.

Recommendations For Linux kernel versions prior to 5.12-rc1, update to version 5.12-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ioctl function with the DRM IOCTL NOUVEAU CHANNEL ALLOC parameter to minimize the risk of exploitation.