CVE-2020-7053: linux linux_kernel Use After Free
Vulnerability summary
CVE-2020-7053 is a high (CVSS 7.8) Use After Free vulnerability in linux linux_kernel. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 20 · Related 16Timeline
- 14-01-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.62% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu27 products
- linux< 4.15.0-76.86
- linux-aws< 4.15.0-1058.60
- linux-aws-5.0< 5.0.0-1025.28
- linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
- linux-aws-hwe< 4.15.0-1058.60~16.04.1
Debian1 product
- linux< 5.2.6-1
Linux1 product
- linux_kernel≥ 4.14, ≤ 4.14.165 | ≥ 4.19, ≤ 4.19.96 | ≥ 5.0, ≤ 5.2
3 vendors · 29 products
References
20 links- security.netapp.com/advisory/ntap-20200204-0002/X Refsource CONFIRM
