CVE-2020-25221

HIGH

Linux Kernel < 5.8.7 - Privilege Escalation

Title source: rule

Description

get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 41.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-672
Status published

Affected Products (6)

linux/linux_kernel < 5.8.7
netapp/cloud_backup
netapp/solidfire\,_enterprise_sds_\&_hci_storage_node
netapp/solidfire_\&_hci_management_node
netapp/hci_compute_node
netapp/solidfire_baseboard_management_controller

Timeline

Published Sep 10, 2020
Tracked Since Feb 18, 2026