Medium severity · published Jun 12, 2020
CVE-2020-10732
A flaw was found in the Linux kernel's implementation of Userspace core dumps
4.4
CVSS
0.6%
EPSS
No
On KEV
Description
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 3.16.85; 4.4 before 4.4.226; 4.9 before 4.9.226; 4.14 before 4.14.183; 4.19 before 4.19.126; 5.4 before 5.4.44; +1 more · source: NVD
AI
Active IQ Unified Manager · Netapp
9.5 and later · source: NVD
A8
Aff 8300 Firmware · Netapp
All versions, or not specified · source: NVD
A8
Aff 8700 Firmware · Netapp
All versions, or not specified · source: NVD
AA
Aff A400 Firmware · Netapp
All versions, or not specified · source: NVD
AA
Aff A700 Firmware · Netapp
All versions, or not specified · source: NVD
HF
H300e Firmware · Netapp
All versions, or not specified · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410c Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500e Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-10732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-10732
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732
Patch
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d
Issue Tracking
https://github.com/google/kmsan/issues/76
Patch
https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability