CVE-2020-25668

mediumpriority · track · 28EPSS 0.010 · 63 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.03% (63rd) EPSS

CVSS 6.9 · medium

Is it mine?

37 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.

cvss

Technical severity, 0–10. One row per scoring source.

7.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7

v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.4 · impact 10

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1 · impact 5.9

v3.17highAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.4mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-662USprimaryCWE-362USCWE-362USCWE-416USCWE-662US

affected products (37)

Products and version ranges known to be affected.

n/a Linux kernel≤ 5.9.2enisa_euvdEU
Canonical Ltd. Ubuntu≤ 18.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 16.04 ESMfstec_bduRU
Canonical Ltd. Ubuntu≤ 20.10fstec_bduRU
Canonical Ltd. Ubuntu≤ 20.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 14.04 ESMfstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.4fstec_bduRU
ООО "Открытая мобильная платформа" ОС Аврора≤ 4.0.2fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 9fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 10fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 11fstec_bduRU
Сообщество свободного программного обеспечения Linux4.0 → 4.4.241fstec_bduRU
Сообщество свободного программного обеспечения Linux4.10 → 4.14.203fstec_bduRU
Сообщество свободного программного обеспечения Linux4.15 → 4.19.154fstec_bduRU
Сообщество свободного программного обеспечения Linux4.20 → 5.4.74fstec_bduRU
Сообщество свободного программного обеспечения Linux4.5 → 4.9.241fstec_bduRU
Сообщество свободного программного обеспечения Linux5.5 → 5.9.4fstec_bduRU
debian debian linux= 9.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
linux linux kernel< 4.4.242nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel4.10 → 4.14.204nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

showing 20 of 37

advisories (1)

Vendor and ecosystem advisories describing this.

PUB-A-1902286582021-12-01vendor · osvUS
In vt_disallocate and related functions of vt_ioctl.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv nvd NVD CVE.org MITRE

published 2021-05-26modified 2026-06-17

related (263)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-7457US	high8.1	33.1% (98th)	Exploit	2020-07-09
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_…
CVE-2023-0045US	high7.5	2.40% (84th)	Exploit	2023-04-25
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for th…
CVE-2018-15555US	critical9.8	2.97% (87th)	—	2019-06-28
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.
CVE-2024-32644US	critical9.1	0.94% (61st)	—	2024-04-19
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary token…
CVE-2022-23005US	high8.7	0.81% (57th)	—	2023-01-23
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM co…

+258 more

references (42)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan