← back
CVE-2020-14351

CVE-2020-14351

EPSS 0.3%CWE-416
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS EPSS 0.3%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
03 Dec 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected products
n/a · kernel