PT-2020-3072

CVE-2020-10742

·

Published

2020-05-13

·

Updated

2025-09-17

Description by

CVSS 2.0
6.6
Medium
MetricsAV:L/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a buffer overflow in the Direct IO function of the Linux kernel, which can be exploited to gain unauthorized access to protected information or cause a denial of service. This flaw can lead to the NFS client crashing and, in some cases, cause a kernel panic after a memory allocation by kmalloc. The primary threats posed by this issue are to data confidentiality and system availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
CESA-2020_4060
RHSA-2020:4060
RHSA-2020_4060
RHSA-2020:4062
RHSA-2020_4062
Found an issue in the description? Have something to add? Feel free to write us 👾