CVE-2020-27835
Medium
Description
A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.
SeverityMedium
CVSS4.4
Exploit probability—
Product
Linux Infiniband Hfi1 Driver
PublishedJan 7, 2021
First seenJan 7, 2021
Weakness typeCWE-416Use after free
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux infiniband_hfi1_driver | v ≤ 5.9, 5.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.