CVE-2020-12659

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.71% chance of exploitation in the next 30 days, 51th percentile

Published

2020-05-05

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://bugzilla.kernel.org/show_bug.cgi?id=207225

References

• CVE Record
• NVD entry

Related

• CVE-2020-12641
• CVE-2020-12676
• CVE-2020-12640
• CVE-2020-12695
• CVE-2020-12638
• CVE-2020-12696