5.5
CVSSv3

CVE-2020-27830

Published: 13/05/2021 Updated: 07/09/2021
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2020-27815 A flaw was reported in the JFS filesystem code allowing a local attacker with the ability to set extended attributes to cause a denial of service CVE-2020-27825 Adam pi3 Z ...
A security issue was found in the speakup module of the Linux kernel In the spk_ttyio_receive_buf2() function in drivers/accessibility/speakup/spk_ttyioc, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a null pointer dereference crash ...

Mailing Lists

Hi, CVE-2020-27830 has been assigned to this issue Regards, Bodong On Mon, Dec 7, 2020 at 6:23 PM John Haxby <johnhaxby () oracle com> wrote: ...
Hi, CVE-2020-27830 was assigned on linux-distros by Redhat (It might be good to keep discussions on oss-security after publication to avoid parallel threads) Ciao, Marcus On Mon, Dec 07, 2020 at 07:02:02PM +0800, - Nop wrote: ...