VULNERABILITY INTELLIGENCE

CVE-2020-14351

CVSS score7.8 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2020-12-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Weakness classification

  • secalert@redhat.com: CWE-416
  • nvd@nist.gov: CWE-416

Primary references