CVE-2020-27820

2021-11-0300:00:00

ubuntu.com

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

16.1%

JSON

A vulnerability was found in Linux kernel, where a use-after-frees in
nouveau’s postclose() handler could happen if removing device (that is not
common to remove video card physically without power-off, but same happens
if “unbind” the driver).

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-27820>

Notes

Author	Note
sbeattie	likely only goes back to 5.4 kernels

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-110.124UNKNOWN
ubuntu21.10noarchlinux< 5.13.0-28.31UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-224.257UNKNOWN
ubuntu18.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1073.78UNKNOWN
ubuntu21.10noarchlinux-aws< 5.13.0-1012.13UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1104.109UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1140.154UNKNOWN
ubuntu20.04noarchlinux-aws-5.11< 5.11.0-1028.31~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-110.124	UNKNOWN
ubuntu	21.10	noarch	linux	< 5.13.0-28.31	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-224.257	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1073.78	UNKNOWN
ubuntu	21.10	noarch	linux-aws	< 5.13.0-1012.13	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1104.109	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1140.154	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.11	< 5.11.0-1028.31~20.04.1	UNKNOWN