CVE-2020-25221: linux linux_kernel
Vulnerability summary
CVE-2020-25221 is a high (CVSS 7.8) vulnerability in linux linux_kernel. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 50.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 10-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.67%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.67% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu15 products
- linuxAll versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.3All versions (No fix recorded)
- linux-azureAll versions (No fix recorded)
Netapp5 products
Debian1 product
- linux< 5.8.7-1
Linux1 product
- linux_kernel≥ 5.7.0, < 5.8.7
4 vendors · 22 products
References
9 links- www.openwall.com/lists/oss-security/2020/09/08/4X Refsource MISCREPORTMailing ListPatchThird Party Advisory
- git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2X Refsource MISCREPORTIssue TrackingPatchVendor Advisory
- git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73aX Refsource MISCREPORTIssue TrackingPatchVendor Advisory
- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7X Refsource MISCREPORTRelease NotesVendor Advisory
- www.openwall.com/lists/oss-security/2020/09/10/4Mailing ListX Refsource MLISTREPORTThird Party Advisory
