Lucene search

K
redhatcveRedhat.comRH:CVE-2020-10732
HistoryMay 05, 2020 - 1:40 p.m.

CVE-2020-10732

2020-05-0513:40:07
redhat.com
access.redhat.com
44

EPSS

0.001

Percentile

19.5%

A flaw was found in the Linux kernel’s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

Mitigation

Possible mitigation would be to disable core dumps system-wide by setting:

  • hard core 0

In the /etc/security/limits.conf file and restarting applications/services/processes which users may have access to or simply reboot the system. This disables core dumps which may not be a suitable workaround in your environment.