CVE-2020-12656

A flaw was found in the implementation of the Linux kernel’s GSS mechanism registration functionality. During this period, memory allocation was not freed when the module was unloaded, leading to a memory leak. This flaw allows an attacker with the ability to repeat loads and unloads, to cause the system to run out of free memory and crash eventually.

Mitigation

There is no mitigation to this flaw other than to prevent the loading of the affected kernel module.

A user with permission to load a kernel module would also likely have permission to overcome any blacklisting on the system.