Search/CVE-2020-8992
● CVE — Medium

CVE-2020-8992

Vendorlinux, netapp, canonical, opensuseProductlinux kernel, h410c firmware, ubuntu linux, leap, active iq unified manager, cloud backup, steelstore cloud integrated storage, solidfire, hci management node, data availability servicesDiscoveredFeb 14, 2020UpdatedNov 21, 2024

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

CVSS v3.1
5.5 MEDIUM
EPSS
0.42%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Timeline
disclosure → media coverage
Feb 14, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024