CVE-2020-25212: canonical ubuntu_linux
Modified
AliasesSUSE-SU-2020:3181-1UBUNTU-CVE-2020-25212DEBIAN-CVE-2020-25212
Published 09-09-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-25212 is a high (CVSS 7.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.9% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
7.0/10
010
High · v3.1 (NVD)EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 48 · Related 38DLA-2385-1DLA-2420-1OPENSUSE-SU-2020:1586-1OPENSUSE-SU-2020:1655-1OPENSUSE-SU-2020:1682-1OPENSUSE-SU-2020:1698-1OPENSUSE-SU-2020:2112-1OPENSUSE-SU-2021:0242-1RHSA-2020:4279RHSA-2020:5437RHSA-2020:5441RHSA-2021:0526RHSA-2021:0760RHSA-2021:0878RHSA-2021:1578RHSA-2021:1739SUSE-SU-2020:2879-1SUSE-SU-2020:2904-1SUSE-SU-2020:2905-1SUSE-SU-2020:2906-1SUSE-SU-2020:2907-1SUSE-SU-2020:2908-1SUSE-SU-2020:2981-1SUSE-SU-2020:2999-1SUSE-SU-2020:3014-1SUSE-SU-2020:3178-1SUSE-SU-2020:3180-1SUSE-SU-2020:3186-1SUSE-SU-2020:3187-1SUSE-SU-2020:3188-1SUSE-SU-2020:3190-1SUSE-SU-2020:3204-1SUSE-SU-2020:3210-1SUSE-SU-2020:3219-1SUSE-SU-2020:3222-1SUSE-SU-2020:3225-1SUSE-SU-2020:3230-1SUSE-SU-2020:3281-1SUSE-SU-2020:3484-1SUSE-SU-2020:3491-1SUSE-SU-2020:3501-1SUSE-SU-2020:3503-1SUSE-SU-2020:3532-1SUSE-SU-2020:3544-1USN-4525-1USN-4527-1USN-4578-1USN-4752-1
Timeline
- 09-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.0Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Medium 4.4Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.27% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionThe product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu40 products
- linuxAll versions (No fix recorded) | < 4.4.0-190.220 | < 4.15.0-121.123 | < 5.4.0-48.52
- linux-aws< 4.4.0-1078.82 | < 4.4.0-1114.127 | < 4.15.0-1086.91 | < 5.4.0-1025.25
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.3All versions (No fix recorded)
- linux-aws-5.4< 5.4.0-1025.25~18.04.1
Debian2 products
- linux< 5.7.17-1
- debian_linuxEOL9.0
Suse2 products
- kernel-livepatch-SLE15-SP2_Update_3&distro=SUSE Linux Enterprise Live Patching 15 SP2< 2-2.1
- kernel-livepatch-SLE15-SP2_Update_4&distro=SUSE Linux Enterprise Live Patching 15 SP2< 2-2.1
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04
Linux1 product
- linux_kernel< 5.8.3
Opensuse1 product
- leapEOL15.1 | 15.2
6 vendors · 47 products
References
24 links- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3X Refsource MISCREPORTMailing ListVendor Advisory
lists.debian.org/debian-lts-announce/2020/09/msg00025.htmlMailing ListX Refsource MLISTThird Party Advisory- lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 24 references
- lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlMailing ListX Refsource MLISTThird Party Advisory
