K07933942 : Linux kernel vulnerabilities CVE-2020-25668, CVE-2020-25669

Security Advisory Description

• A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op. (CVE-2020-25668)

• A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free. (CVE-2020-25669)

Impact

There is no impact; F5 products are not affected by this vulnerability.