CVE-2020-14385 json
A flaw was found in the Linux kernel before 5.9-rc4.
published 2020-09-15 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-6525
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 36%
- public exploits
- 0
- none known
Summary
A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Patch / fix
- linux linux_kernel 5.9.0
- linux Debian 14, Debian 13, Debian 12 5.8.7-1
debian advisories DEBIAN-CVE-2020-14385
- linux Ubuntu 20.04 LTS 5.4.0-51.56
- linux-aws Ubuntu 20.04 LTS 5.4.0-1028.29
- linux-gcp Ubuntu 20.04 LTS 5.4.0-1028.29
- linux-kvm Ubuntu 20.04 LTS 5.4.0-1026.27
- linux-azure Ubuntu 20.04 LTS 5.4.0-1031.32
- linux-raspi Ubuntu 20.04 LTS 5.4.0-1021.24
- linux-riscv Ubuntu 20.04 LTS 5.4.0-36.41
- linux-oracle Ubuntu 20.04 LTS 5.4.0-1028.29
ubuntu advisories UBUNTU-CVE-2020-14385
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-rt RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel-rt-kvm RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel-rt-trace RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel-rt-debug-kvm RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel-rt-trace-kvm RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel-rt-debuginfo-common-x86_64 RHEL 7 EXTRAS_RT 3.10.0-1160.11.1.rt56.1145.el7
- kernel RHEL 7 3.10.0-1160.11.1.el7
- perf RHEL 7 3.10.0-1160.11.1.el7
red hat advisories RHSA-2020:5441RHSA-2020:5437RHSA-2020:5199RHSA-2020:5050RHSA-2020:4286RHSA-2020:4332
- kernel-azure SLE Module for Public Cloud 15 SP2 5.3.18-18.21.1
- kernel-syms-azure SLE Module for Public Cloud 15 SP2 5.3.18-18.21.1
- kernel-source-azure SLE Module for Public Cloud 15 SP2 5.3.18-18.21.1
- kernel-syms SLE Module for Development Tools 15 SP2 5.3.18-24.24.1
- kernel-source SLE Module for Development Tools 15 SP2, SLE Module for Basesystem 15 SP2 5.3.18-24.24.1
- kernel-default SLE Workstation Extension 15 SP2, SLE Module for Legacy 15 SP2, SLE Module for Basesystem 15 SP2 +2 more 5.3.18-24.24.1
- kernel-preempt SLE Module for Development Tools 15 SP2, SLE Module for Basesystem 15 SP2 5.3.18-24.24.1
- kernel-obs-build SLE Module for Development Tools 15 SP2 5.3.18-24.24.1
suse advisories SUSE-SU-2020:2908-1SUSE-SU-2020:2879-1
- kernel-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-syms-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-rt_debug openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-source-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-syms openSUSE Leap 15.2 5.3.18-lp152.44.1
- kernel-obs-qa openSUSE Leap 15.2 5.3.18-lp152.44.1
- kernel-source openSUSE Leap 15.2 5.3.18-lp152.44.1
- kernel-default openSUSE Leap 15.2 5.3.18-lp152.44.1
opensuse advisories openSUSE-SU-2021:0242-1openSUSE-SU-2020:1586-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2020-14385 updated cvss 6.2
kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt
-
Red Hat CodeReady Linux Builder (v. 8) kernel-debuginfo-common-x86_64 4.18.0-193.28.1.el8_2, kernel-debuginfo-common-aarch64 4.18.0-193.28.1.el8_2, kernel-debuginfo-common-ppc64le 4.18.0-193.28.1.el8_2fixed: vendor fix RHSA-2020:4286
-
Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-debuginfo-common-x86_64 4.18.0-147.32.1.el8_1, kernel-debuginfo-common-aarch64 4.18.0-147.32.1.el8_1, kernel-debuginfo-common-ppc64le 4.18.0-147.32.1.el8_1fixed: vendor fix RHSA-2020:4287
-
Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-193.28.1.el8_2, kernel 4.18.0-193.28.1.el8_2, bpftool 4.18.0-193.28.1.el8_2, kpatch-patch-4_18_0-193 1-7.el8, kernel-core 4.18.0-193.28.1.el8_2, kernel-tools 4.18.0-193.28.1.el8_2, +21 morefixed: vendor fix RHSA-2020:4286
-
Red Hat Enterprise Linux BaseOS E4S (v. 8.0) perf 4.18.0-80.31.1.el8_0, kernel 4.18.0-80.31.1.el8_0, bpftool 4.18.0-80.31.1.el8_0, kernel-core 4.18.0-80.31.1.el8_0, kernel-tools 4.18.0-80.31.1.el8_0, python3-perf 4.18.0-80.31.1.el8_0, +9 morefixed: vendor fix RHSA-2020:5199
-
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) perf 4.18.0-147.32.1.el8_1, kernel 4.18.0-147.32.1.el8_1, bpftool 4.18.0-147.32.1.el8_1, kpatch-patch-4_18_0-147 1-18.el8, kernel-core 4.18.0-147.32.1.el8_1, kernel-tools 4.18.0-147.32.1.el8_1, +25 morefixed: vendor fix RHSA-2020:4287
-
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-1160.11.1.el7, kernel 3.10.0-1160.11.1.el7, bpftool 3.10.0-1160.11.1.el7, python-perf 3.10.0-1160.11.1.el7, kernel-tools 3.10.0-1160.11.1.el7, kernel-tools-libs 3.10.0-1160.11.1.el7, +2 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.11.1.el7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.11.1.el7fixed: vendor fix RHSA-2020:5437
-
Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-trace 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.11.1.rt56.1145.el7 Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-kvm 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-trace 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debug-kvm 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-trace-kvm 3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.11.1.rt56.1145.el7fixed: vendor fix RHSA-2020:5441
-
Red Hat Enterprise Linux Real Time (v. 8) kernel-rt 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-core 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-modules 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-core 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-modules 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-modules-extra 4.18.0-193.28.1.rt13.77.el8_2, +2 more Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-kvm 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-core 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-modules 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-kvm 4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-core 4.18.0-193.28.1.rt13.77.el8_2, +4 morefixed: vendor fix RHSA-2020:4289
show 2 moreshow fewer
-
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-1160.11.1.el7, kernel 3.10.0-1160.11.1.el7, bpftool 3.10.0-1160.11.1.el7, kpatch-patch-3_10_0-1160 1-1.el7, python-perf 3.10.0-1160.11.1.el7, kernel-kdump 3.10.0-1160.11.1.el7, +11 more Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-1160.11.1.el7, kernel-debuginfo-common-x86_64 3.10.0-1160.11.1.el7, kernel-debuginfo-common-ppc64le 3.10.0-1160.11.1.el7 Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-1160.11.1.el7, kernel 3.10.0-1160.11.1.el7, bpftool 3.10.0-1160.11.1.el7, python-perf 3.10.0-1160.11.1.el7, kernel-tools 3.10.0-1160.11.1.el7, kernel-tools-libs 3.10.0-1160.11.1.el7, +2 more Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.11.1.el7fixed: vendor fix RHSA-2020:5437
-
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, kernel-alt, python-perf, kernel-kdump, kernel-tools, +3 more Red Hat Enterprise MRG 2 kernelnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.7 | AV:L/AC:M/Au:N/C:N/I:N/A:C |
Affected products
- Linux Kernel kernel
Classification
- Weakness
-
- CWE-131 Incorrect Calculation of Buffer Size
- Technology feeds
References
-
git.kernel.org
/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933
patch, vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2020-10/msg00001.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/4576-1/
vendor-advisory, third-party-advisory
-
bugzilla.redhat.com
/show_bug.cgi?id=CVE-2020-14385
issue-tracking, third-party-advisory
-
lists.debian.org
/debian-lts-announce/2020/09/msg00025.html
mailing-list, third-party-advisory
Sources
- CVE List CVE-2020-14385
- NVD CVE-2020-14385
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.