CVE-2020-25639: A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl…

Description

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 30% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

KE

Kernel · Linux

Linux kernel versions prior to 5.12-rc1 · source: vendor, NVD

EL

Enterprise Linux · Redhat

5.0; 6.0; 7.0; 8.0 · source: NVD

FE

Fedora · Fedoraproject

32; 33 · source: NVD

MR

Messaging Realtime Grid · Redhat

2.0 · source: NVD

OC

Openshift Container Platform · Redhat

4.4; 4.5; 4.6 · source: NVD