CVE-2020-25221
HIGHLinux Kernel < 5.8.7 - Privilege Escalation
Title source: ruleDescription
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Exploits (1)
github
34 stars
by DarkFunct · cpoc
https://github.com/DarkFunct/CVE_Exploits/tree/main/CVE-2020-25221
References (6)
Scores
CVSS v3
7.8
EPSS
0.0019
EPSS Percentile
41.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-672
Status
published
Products (6)
linux/linux_kernel
5.7.0 - 5.8.7
netapp/cloud_backup
netapp/hci_compute_node
netapp/solidfire_baseboard_management_controller
netapp/solidfire\,_enterprise_sds_\&_hci_storage_node
netapp/solidfire_\&_hci_management_node
Published
Sep 10, 2020
Tracked Since
Feb 18, 2026