CVE-2020-25639

2021-03-0421:56:28

CWE-476

redhat

www.cve.org

cve-2020-25639

linux kernel

gpu nouveau driver

null pointer dereference

ioctl

system crash

AI Score

5.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

A NULL pointer dereference flaw was found in the Linux kernel’s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux kernel versions prior to 5.12-rc1"
      }
    ]
  }
]