CVE-2020-28941

Aliases:UBUNTU-CVE-2020-28941DEBIAN-CVE-2020-28941
Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 19 Nov 2020, 15:23
Last modified:29 May 2026, 16:06

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.33% LOW
0% probability +0.27%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Nov 2020, 15:23
Published
Vulnerability first disclosed
29 May 2026, 16:06
Last Modified
Vulnerability information updated

Description

An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.33%• Percentile: 27%

Techniques & Countermeasures

  • CWE-763•Release of Invalid Pointer or Reference

    The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

Affected Systems

  • debian•linux

    < 5.9.11-1 | < 5.9.11-1 | < 5.9.11-1 | < 5.9.11-1

  • ubuntu•linux

    < 4.15.0-136.140 | < 5.4.0-66.74

  • ubuntu•linux-aws

    < 4.15.0-1094.101 | < 5.4.0-1038.40

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1038.40~18.04.1

  • ubuntu•linux-aws-fips

    < 4.15.0-2037.39 | all | < 5.4.0-1069.73+fips2

  • ubuntu•linux-aws-hwe

    < 4.15.0-1094.101~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1108.120~14.04.1 | < 4.15.0-1108.120~16.04.1 | all | < 5.4.0-1040.42

  • ubuntu•linux-azure-4.15

    < 4.15.0-1108.120

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1040.42~18.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2020.23 | all | < 5.4.0-1073.76+fips1

  • ubuntu•linux-bluefield

    all

  • ubuntu•linux-dell300x

    < 4.15.0-1012.16

  • ubuntu•linux-fips

    < 4.15.0-1053.61 | all

  • ubuntu•linux-gcp

    < 4.15.0-1093.106~16.04.1 | all | < 5.4.0-1037.40

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1093.106

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1037.40~18.04.1

  • ubuntu•linux-gcp-edge

    all

  • ubuntu•linux-gcp-fips

    all | < 5.4.0-1067.71~20.04.1

  • ubuntu•linux-gke

    < 5.4.0-1036.38

  • ubuntu•linux-gke-4.15

    < 4.15.0-1079.84

  • ubuntu•linux-gke-5.4

    < 5.4.0-1036.38~18.04.1

  • ubuntu•linux-gkeop

    < 5.4.0-1010.11

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1010.11~18.04.1

  • ubuntu•linux-hwe

    < 4.15.0-136.140~16.04.1 | all

  • ubuntu•linux-hwe-5.4

    < 5.4.0-66.74~18.04.2

  • ubuntu•linux-hwe-5.8

    < 5.8.0-44.50~20.04.1

  • ubuntu•linux-hwe-edge

    all | all

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 4.15.0-1085.87 | < 5.4.0-1033.34

  • ubuntu•linux-oem

    all

  • ubuntu•linux-oem-5.6

    all

  • ubuntu•linux-oracle

    < 4.15.0-1065.73~16.04.1 | < 4.15.0-1065.73 | < 5.4.0-1038.41

  • ubuntu•linux-oracle-5.0

    all

  • ubuntu•linux-oracle-5.3

    all

  • ubuntu•linux-oracle-5.4

    < 5.4.0-1038.41~18.04.1

  • ubuntu•linux-raspi

    < 5.4.0-1029.32

  • ubuntu•linux-raspi-5.4

    < 5.4.0-1029.32~18.04.1

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    < 4.15.0-1079.84 | all

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-riscv

    all

  • ubuntu•linux-riscv-5.8

    < 5.8.0-17.19~20.04.1

  • ubuntu•linux-snapdragon

    < 4.15.0-1096.105

  • debian•debian_linux

    9.0

  • fedoraproject•fedora

    32 | 33

Showing first 50 affected entries in server-rendered view.

References (14)