CVE-2020-25643

HIGH

7.2

CVSS Score

Published: October 6, 2020 at 12:00 AM UTC

Updated: June 17, 2026 at 03:07 AM UTC

8 products affected across 6 vendorsLinux KernelDebian LinuxEnterprise Linux

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploit prediction

EPSS 3%

Description

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0 9.0

Linux Kernel · Linux

95%

2.6.29 ≤ v < 4.4.2384.10 ≤ v < 4.14.2004.15 ≤ v < 4.19.1484.20 ≤ v < 5.4.684.5 ≤ v < 4.9.2385.5 ≤ v < 5.8.125.9.0 rc1 5.9.0 rc2 5.9.0 rc3 5.9.0 rc4 5.9.0 rc5 5.9.0 rc6

Affected range stops below 4.14.200, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.148, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.68, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.8.12, so it looks safe — our inference, not a vendor statement

H410C Firmware · NetAppdrupal

95%

All versions

netapp-h410c (same device)

Leap · openSUSEdrupal

95%