Skip to content

kernel CVE-2020-25639

Low
tjkirch published GHSA-62pv-3mv8-wx3m Apr 12, 2021

Package

kernel (bottlerocket)

Affected versions

< 1.0.8

Patched versions

1.0.8

Description

A NULL pointer dereference flaw was found in the Linux kernel’s GPU Nouveau driver functionality in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

Severity

Low

CVE ID

CVE-2020-25639

Weaknesses

No CWEs