CVE-2020-25221
HIGHLinux Kernel < 5.8.7 - Privilege Escalation
Title source: ruleDescription
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Exploits (1)
github
34 stars
by DarkFunct · cpoc
https://github.com/DarkFunct/CVE_Exploits/tree/main/CVE-2020-25221
References (6)
Scores
CVSS v3
7.8
EPSS
0.0019
EPSS Percentile
41.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-672
Status
published
Affected Products (6)
linux/linux_kernel
< 5.8.7
netapp/cloud_backup
netapp/solidfire\,_enterprise_sds_\&_hci_storage_node
netapp/solidfire_\&_hci_management_node
netapp/hci_compute_node
netapp/solidfire_baseboard_management_controller
Timeline
Published
Sep 10, 2020
Tracked Since
Feb 18, 2026