CVE-2020-25668
kernel: race condition in fg_console can lead to use-after-free in con_font_op
Severity
UnknownRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 30, 2020
Updated · June 28, 2026
Description
A use-after-free flaw was found in the Linux kernel’s TTY driver functionality in the way the user triggers the con_font_op function. This flaw allows a local user to crash or escalate their privileges on the system or expose sensitive information (kernel memory).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N
CWE-366 · Race Condition within a Thread