CVE-2020-25639

Published: Mar 4, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

Affected (11)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Redhat: Enterprise Linux, Messaging Realtime Grid, Openshift Container Platform

1 product

1 product

3 products

Messaging Realtime Grid

Openshift Container Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.11.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32
Fedoraproject Fedora	Version 33

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Messaging Realtime Grid	Version 2.0
Redhat Openshift Container Platform	Version 4.4
Redhat Openshift Container Platform	Version 4.5
Redhat Openshift Container Platform	Version 4.6