CVE-2020-27835

MEDIUM

Linux infiniband_hfi1_driver < 5.10-rc6 - Use-After-Free via Ioctl After Fork

Title source: llm

Description

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.

References (1)

Core 1

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://bugzilla.redhat.com/show_bug.cgi?id=1901709

Scores

CVSS v3 4.4

EPSS 0.0031

EPSS Percentile 22.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-416

Status published

Products (2)

linux/infiniband_hfi1_driver 5.10 rc1 (5 CPE variants)

linux/infiniband_hfi1_driver < 5.9

Published Jan 07, 2021

Tracked Since Feb 18, 2026