CVE-2020-12653

Vendordebian, linux, netapp, opensuseProductdebian linux, linux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h610c firmware, h610s firmware, h615c firmware, h700e firmware, h700s firmware, leap, active iq unified manager, cloud backup, element software, steelstore cloud integrated storage, solidfire, hci management node, a700s firmware, hci compute node firmwareDiscoveredMay 5, 2020UpdatedNov 21, 2024

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

View graph Watch Export

CVSS v3.1

7.8 HIGH

EPSS

0.45%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 24, 2026

▲ 0.02pp

0.43% → 0.45% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

disclosure → media coverage

May 5, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024