CVE-2020-10774

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-193.el8

Description A memory disclosure flaw was found in the Linux kernel's sysctl subsystem when reading the /proc/sys/kernel/rh features file. This flaw allows a local user to read uninitialized values from the kernel memory, posing a threat to confidentiality.

Recommendations For Linux kernel versions prior to 4.18.0-193.el8, update to version 4.18.0-193.el8 or later to resolve the issue. As a temporary workaround, consider restricting access to the /proc/sys/kernel/rh features file to minimize the risk of exploitation.