« Volver al listado

CVE-2020-27835

Estado: ModificadaMedia (4.4)—

Se encontró un uso de la memoria previamente liberada en el controlador infiniband hfi1 del kernel de Linux en versiones anteriores a 5.10-rc6, en la manera en que el usuario llama una Ioctl después de abrir el archivo dev y la rama. Un usuario local podría usar este fallo para bloquear el sistema

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Linux — Infiniband Hfi1 Driver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-27835",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "kernel",
          "versions": [
            {
              "status": "affected",
              "version": "kernel versions prior to 5.10-rc6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-01-07T18:15:13.137",
  "references": [
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901709",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901709",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system."
    },
    {
      "lang": "es",
      "value": "Se encontró un uso de la memoria previamente liberada en el controlador infiniband hfi1 del kernel de Linux en versiones anteriores a 5.10-rc6, en la manera en que el usuario llama una Ioctl después de abrir el archivo dev y la rama. Un usuario local podría usar este fallo para bloquear el sistema"
    }
  ],
  "lastModified": "2026-06-17T03:09:42.553",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99E5D6FB-5CEF-430C-81AC-928A9A01B9C6",
              "versionEndIncluding": "5.9"
            },
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:5.10:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE97FE96-B356-40E7-B12D-8BAADB9EBB33"
            },
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:5.10:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D3FC0AE-D981-49AD-8D9E-BEE39489D8B0"
            },
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:5.10:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCFE51EF-E796-44C1-8A4C-3248AD5EC5B3"
            },
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:5.10:rc4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84989273-E8E5-4296-BC4A-BB543F70FA81"
            },
            {
              "criteria": "cpe:2.3:a:linux:infiniband_hfi1_driver:5.10:rc5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5798EA92-2CF5-4BE2-8904-261085662EB5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}