CVE-2020-25704

Published: Dec 2, 2020Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

Affected (8)

Products: Linux: Linux Kernel · Debian: Debian Linux · Starwindsoftware: Command Center, Starwind Hyperconverged Appliance, Starwind San & Nas, Starwind Virtual San

1 product

1 product

Starwindsoftware

4 products

Starwind Hyperconverged Appliance

Starwind San & Nas

Starwind Virtual San

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.9
Linux Linux Kernel	Version 5.10 rc1
Linux Linux Kernel	Version 5.10 rc2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Starwindsoftware Command Center	All versions
Starwindsoftware Starwind Hyperconverged Appliance	All versions
Starwindsoftware Starwind San & Nas	Version v8r12
Starwindsoftware Starwind Virtual San	Version v8 build14398

Related CWEs

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (12)

https://bugzilla.redhat.com/show_bug.cgi?id=1895961

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00

Source: secalert@redhat.com

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2020/11/09/1

Source: secalert@redhat.com

Mailing List

https://www.starwindsoftware.com/security/sw-20220802-0003/

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1895961

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2020/11/09/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://www.starwindsoftware.com/security/sw-20220802-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.