Main
Vulnerability Database
Exploits
ID:5467 - Exploit for Use-after-free in Linux kernel - CVE-2020-8428
ID:5467 - Exploit for Use-after-free in Linux kernel - CVE-2020-8428
Published: May 24, 2021
Vulnerability identifier: #VU24834
Vulnerability risk: Low
CVE-ID: CVE-2020-8428
CWE-ID: CWE-416
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the "may_create_in_sticky" in "fs/namei.c". A local user can cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory.
Remediation
Install updates from vendor's website.