7.5

CVE-2020-1749: linux kernel kernel

Modified
AliasesSUSE-SU-2020:0891-1SUSE-SU-2020:1049-1UBUNTU-CVE-2020-1749
Published 09-09-2020Last modified 04-08-2024

Vulnerability summary

CVE-2020-1749 is a high (CVSS 7.5) vulnerability in linux kernel kernel. EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 69.1% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
1.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 37 · Related 32
DLA-2241-1OPENSUSE-SU-2020:1325-1OPENSUSE-SU-2021:0242-1RHSA-2020:1567RHSA-2020:1769RHSA-2020:4060

Timeline

  1. 09-09-2020
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

1.24%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.24% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard83 products
  • hyperv-daemons-6.18All versions (No fix recorded)
  • hyperv-daemons-genericAll versions (No fix recorded)
  • linux-aws-6.12All versions (No fix recorded) | < 6.12.65-r0
  • linux-aws-6.12-boot-installedAll versions (No fix recorded)
  • linux-aws-6.12-fips-boot-installedAll versions (No fix recorded)
Ubuntu37 products
  • linuxAll versions (No fix recorded) | < 4.4.0-184.214 | < 4.15.0-106.107
  • linux-aws< 4.4.0-1073.77 | < 4.4.0-1109.120 | < 4.15.0-1073.77
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
  • linux-aws-hwe< 4.15.0-1073.77~16.04.1
Suse4 products
  • kernel-livepatch-SLE15-SP1_Update_10&distro=SUSE Linux Enterprise Live Patching 15 SP1< 2-2.2
  • kernel-livepatch-SLE15-SP1_Update_9&distro=SUSE Linux Enterprise Live Patching 15 SP1< 2-2.1
  • kgraft-patch-SLE12-SP4_Update_12&distro=SUSE Linux Enterprise Live Patching 12 SP4< 2-2.1
  • kgraft-patch-SLE12-SP5_Update_3&distro=SUSE Linux Enterprise Live Patching 12 SP5< 2-2.1
Redhat2 products
Debian1 product
  • linux< 5.4.6-1
Linux1 product
Linux kernel1 product

7 vendors · 129 products

References

15 links
Show all 15 references