CVE-2020-35519

HIGH
7.8
CVSS Score
Published: May 6, 2021 at 02:18 PM UTC
Updated: June 17, 2026 at 03:13 AM UTC
21 products affected across 3 vendorsLinux KernelCloud BackupH700S Firmware

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.4%

Description

An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.12 ≤ v < 4.4.2484.10 ≤ v < 4.14.2114.15 ≤ v < 4.19.1624.20 ≤ v < 5.4.824.5 ≤ v < 4.9.2485.5 ≤ v < 5.9.13
Affected range stops below 4.14.211, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.19.162, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.248, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.9.248, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.4.82, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.9.13, so it looks safe — our inference, not a vendor statement
All versions
All versions
netapp-h300e (same device)
All versions
netapp-h300s (same device)
All versions
netapp-h410c (same device)
All versions
netapp-h410s (same device)
All versions
netapp-h500e (same device)
All versions
netapp-h500s (same device)
All versions
netapp-h700e (same device)
All versions
netapp-h700s (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1908251

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card