CVE-2020-27418

MediumCVSS 4.4

Published: 22/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

A Use After Free vulnerability was found in the Fedora Linux kernel 5.9.0-rc9 in the vgacon_invert_region() function. It allows attackers to obtain sensitive information from kernel memory.

Risk Assessment

Attackers can exploit this vulnerability to leak confidential data such as encryption keys or passwords, posing a serious security risk to the system.

Recommendation

Immediately update the Linux kernel to a version containing a fix that eliminates the Use After Free bug in the vgacon_invert_region() function.

Original NVD description (English source)

A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.