Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-25641

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

  • Published: Oct 6, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-25641
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:L/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 5.9.0-rc1 5.9.0-rc1.x
linux / linux_kernel 5.9.0-rc2 5.9.0-rc2.x
linux / linux_kernel 5.9.0-rc3 5.9.0-rc3.x
linux / linux_kernel 5.9.0 5.9.0.x
linux / linux_kernel 5.9.0-rc4 5.9.0-rc4.x
linux / linux_kernel 5.9.0-rc5 5.9.0-rc5.x
linux / linux_kernel - 5.8.13.x
linux / linux_kernel 5.9.0-rc6 5.9.0-rc6.x
redhat / enterprise_linux 7.0 7.0.x
redhat / enterprise_linux 8.0 8.0.x
opensuse / leap 15.1 15.1.x
opensuse / leap 15.2 15.2.x
debian / debian_linux 9.0 9.0.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 20.04 20.04.x