CVE-2020-27815

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.1 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:C

EPSS

0.79% chance of exploitation in the next 30 days, 54th percentile

Published

2021-05-26

Updated

2024-08-04

Proof-of-concept exploits (1)

• Trinadh465/linux-4.19.72_CVE-2020-278150★ · 2023-08-01

References

• CVE Record
• NVD entry

Related

• CVE-2020-27814
• CVE-2020-27824
• CVE-2020-27802
• CVE-2020-27828
• CVE-2020-27801
• CVE-2020-27838