Vulnerability Database

319,561

Total vulnerabilities in the database

CVE-2020-14385

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

  • Published: Sep 15, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-14385
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.7
  • AV:L/AC:M/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 5.9.0-rc1 5.9.0-rc1.x
linux / linux_kernel 5.9.0-rc2 5.9.0-rc2.x
linux / linux_kernel 5.9.0-rc3 5.9.0-rc3.x
linux / linux_kernel 5.9.0 5.9.0.x
linux / linux_kernel - 5.9.0
debian / debian_linux 9.0 9.0.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 20.04 20.04.x