Not rated
CVE-2020-27815 A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set…
Description
A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | 5.9.6 | No fix stated |
References
- [oss-security] 20201201 CVE-2020-27815 Linux kernel: jfs: array-index-out-of-bounds in dbAdjTree www.openwall.com
- [oss-security] 20201228 Re: CVE-2020-27815 Linux kernel: jfs: array-index-out-of-bounds in dbAdjTree www.openwall.com
- DSA-4843 www.debian.org
- [debian-lts-announce] 20210212 [SECURITY] [DLA 2557-1] linux-4.19 security update lists.debian.org
- [debian-lts-announce] 20210309 [SECURITY] [DLA 2586-1] linux security update lists.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- git.kernel.org git.kernel.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Linux kernel
The 47 CVEs of Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Medium
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
High
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Not rated
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
High