Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer/Computer-vulnerabilities-watch-and-alert

SYNTHESIS OF THE VULNERABILITY

Impacted products: Linux, openSUSE Leap, Ubuntu.

Severity: 1/4.

Consequences: denial of service on server.

Provenance: user shell.

Confidence: confirmed by the editor (5/5).

Creation date: 20/08/2020.

DESCRIPTION OF THE VULNERABILITY

An attacker can force a NULL pointer to be dereferenced via
cgroup_sk_alloc() of the Linux kernel, in order to trigger a
denial of service.

ACCESS TO THE FULL VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/Linux-kernel-NULL-pointer-dereference-via-cgroup-sk-alloc-33123