Summary
Kiyin (尹亮) discovered that the perf subsystem in the Linux kernel did
not properly deallocate memory in some situations. A privileged attacker
could use this to cause a denial of service (kernel memory exhaustion).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-133.137~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-135.139 |
Vulnerabilities 1
-
Unscored —
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…
References
-
report
https://ubuntu.com/security/CVE-2020-25704