Rapid7

vulnerability

Amazon Linux AMI: CVE-2020-25704: Security patch for kernel ((Multiple Advisories))

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Nov 15, 2020
Added
Dec 19, 2020
Modified
Oct 14, 2022

Description

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

Solution

amazon-linux-upgrade-kernel
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.