CVE-2020-10732: canonical ubuntu_linux Use of Uninitialized Resource
Vulnerability summary
CVE-2020-10732 is a medium (CVSS 4.4) Use of Uninitialized Resource vulnerability in canonical ubuntu_linux. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.6% of scored vulnerabilities.
Not severe (CVSS 3.3, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 31 · Related 23Timeline
- 12-06-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
- OSV · DebianEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.62% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu41 products
- linuxAll versions (No fix recorded) | < 4.4.0-186.216 | < 4.15.0-115.116 | < 5.4.0-40.44
- linux-aws< 4.4.0-1075.79 | < 4.4.0-1111.123 | < 4.15.0-1080.84 | < 5.4.0-1018.18
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.3< 5.3.0-1032.34~18.04.2
- linux-aws-fips< 4.15.0-2025.25 | All versions (No fix recorded)
Netapp16 products
- active_iq_unified_manager≥ 9.5 (No fix recorded)
- aff_8300_firmwarena
- aff_8700_firmwarena
- aff_a400_firmwarena
- aff_a700_firmwarena
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04
Debian1 product
- linux< 5.6.14-2
Linux1 product
- linux_kernel< 3.16.85 | ≥ 4.4, < 4.4.226 | ≥ 4.9, < 4.9.226 | ≥ 4.14, < 4.14.183 | ≥ 4.19, < 4.19.126 | ≥ 5.4, < 5.4.44 | ≥ 5.6, < 5.6.16
Linux kernel1 product
- kernelintroduced in commit 4206d3aa1978e44f58bfa4e1c9d8d35cbf19c187
Opensuse1 product
- leapEOL15.1 | 15.2
7 vendors · 62 products
References
24 links- lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.htmlVendor AdvisoryMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.htmlVendor AdvisoryMailing ListThird Party Advisory
Show all 24 references
- security.netapp.com/advisory/ntap-20210129-0005/Third Party Advisory
