CVE-2020-9391

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4 through 5.5.6

Description An issue in the Linux kernel on the AArch64 architecture ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards. This has been observed to cause heap corruption with the GNU C Library malloc implementation. The issue is related to a buffer overflow in memory, which can be exploited to cause a denial of service.

Recommendations For Linux kernel versions 5.4 through 5.5.6, consider updating to a newer version to mitigate the risk of heap corruption and denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.