CVE-2020-15437

MEDIUM

Linux Kernel < 5.8 - Denial of Service via NULL Pointer Dereference in serial8250_isa_init_ports

Title source: llm

Description

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.

References (1)

Core 1

Core References

Exploit, Patch, Vendor Advisory x_refsource_misc

https://lkml.org/lkml/2020/7/21/80

Scores

CVSS v3 4.4

EPSS 0.0044

EPSS Percentile 34.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (1)

linux/linux_kernel < 5.8

Published Nov 23, 2020

Tracked Since Feb 18, 2026