Home Embedded Vulns General Vulns

CVE-2020-12659

MEDIUM 6.7

Our Analysis: General Purpose

Our model has classified this vulnerability as relevant to General Purpose Systems, helping your team prioritize efforts effectively.

Published Date May 5, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

Potentially Affected Vendors