CVE-2020-25704 json
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.
published 2020-12-02 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-18359
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 29%
- public exploits
- 0
- none known
Summary
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.
Patch / fix
- linux Debian 14, Debian 13, Debian 12 5.9.6-1
debian advisories DEBIAN-CVE-2020-25704
- linux Ubuntu 18.04 LTS 4.15.0-135.139
- linux Ubuntu 20.04 LTS 5.4.0-59.65
- linux-aws Ubuntu 18.04 LTS 4.15.0-1093.99
- linux-aws Ubuntu 20.04 LTS 5.4.0-1034.35
- linux-gcp Ubuntu 16.04 LTS 4.15.0-1092.105~16.04.1
- linux-gcp Ubuntu 20.04 LTS 5.4.0-1033.35
- linux-hwe Ubuntu 16.04 LTS 4.15.0-133.137~16.04.1
- linux-kvm Ubuntu 18.04 LTS 4.15.0-1084.86
ubuntu advisories UBUNTU-CVE-2020-25704
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel RHEL 8 4.18.0-305.el8
- perf RHEL 8 4.18.0-305.el8
- bpftool RHEL 8 4.18.0-305.el8
- kernel-core RHEL 8 4.18.0-305.el8
- kernel-tools RHEL 8 4.18.0-305.el8
- python3-perf RHEL 8 4.18.0-305.el8
- kernel-modules RHEL 8 4.18.0-305.el8
- kernel-zfcpdump RHEL 8 4.18.0-305.el8
red hat advisories RHSA-2021:1578RHSA-2021:1739RHSA-2021:2719RHSA-2021:2718RHSA-2022:0063RHSA-2022:0065
- kernel-syms SLE Module for Development Tools 15 SP2 5.3.18-24.43.2
- kernel-source SLE Module for Development Tools 15 SP2, SLE Module for Basesystem 15 SP2 5.3.18-24.43.2
- kernel-default SLE Workstation Extension 15 SP2, SLE Module for Legacy 15 SP2, SLE Module for Basesystem 15 SP2 +2 more 5.3.18-24.43.2
- kernel-preempt SLE Module for Development Tools 15 SP2, SLE Module for Basesystem 15 SP2 5.3.18-24.43.2
- kernel-obs-build SLE Module for Development Tools 15 SP2 5.3.18-24.43.2
- kernel-default-base SLE Module for Basesystem 15 SP2 5.3.18-24.43.2.9.17.3
- kernel-syms SLES for SAP 12 SP5, SLES 12 SP5 4.12.14-122.54.1
- kernel-source SLES for SAP 12 SP5, SLES 12 SP5 4.12.14-122.54.1
suse advisories SUSE-SU-2020:3748-1SUSE-SU-2020:3717-1SUSE-SU-2020:3715-1SUSE-SU-2020:3713-1SUSE-SU-2020:3544-1SUSE-SU-2020:3532-1
- kernel-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-syms-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-rt_debug openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-source-rt openSUSE Leap 15.2 5.3.18-lp152.3.5.1
- kernel-default-base openSUSE Leap 15.2 5.3.18-lp152.57.1.lp152.8.17.1
- kernel-default-base openSUSE Leap 15.2 5.3.18-lp152.50.1.lp152.8.10.1
- kernel-syms openSUSE Leap 15.1 4.12.14-lp151.28.83.1
- kernel-obs-qa openSUSE Leap 15.1 4.12.14-lp151.28.83.1
opensuse advisories openSUSE-SU-2021:0242-1openSUSE-SU-2020:2260-1openSUSE-SU-2020:2112-1openSUSE-SU-2020:2034-1openSUSE-SU-2020:1906-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2020-25704 updated cvss 6.2
kernel: perf_event_parse_addr_filter memory
-
Red Hat Enterprise Linux 7 perf, kernel, kernel-alt, python-perf, kernel-kdump, kernel-tools, +3 moreaffected: workaround, no fix planned “Will not fix”
-
Red Hat Enterprise MRG 2 kernelaffected: workaround, no fix planned “Out of support scope”
-
Red Hat CodeReady Linux Builder (v. 8) kernel-debuginfo-common-x86_64 4.18.0-305.el8, kernel-debuginfo-common-aarch64 4.18.0-305.el8, kernel-debuginfo-common-ppc64le 4.18.0-305.el8fixed: vendor fix RHSA-2021:1578
-
Red Hat CodeReady Linux Builder EUS (v. 8.2) kernel-debuginfo-common-x86_64 4.18.0-193.60.2.el8_2, kernel-debuginfo-common-aarch64 4.18.0-193.60.2.el8_2, kernel-debuginfo-common-ppc64le 4.18.0-193.60.2.el8_2fixed: vendor fix RHSA-2021:2718
-
Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-305.el8, kernel 4.18.0-305.el8, bpftool 4.18.0-305.el8, kernel-core 4.18.0-305.el8, kernel-tools 4.18.0-305.el8, python3-perf 4.18.0-305.el8, +15 morefixed: vendor fix RHSA-2021:1578
-
Red Hat Enterprise Linux BaseOS EUS (v. 8.2) perf 4.18.0-193.60.2.el8_2, kernel 4.18.0-193.60.2.el8_2, bpftool 4.18.0-193.60.2.el8_2, kernel-core 4.18.0-193.60.2.el8_2, kernel-tools 4.18.0-193.60.2.el8_2, python3-perf 4.18.0-193.60.2.el8_2, +15 morefixed: vendor fix RHSA-2021:2718
-
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-1160.53.1.el7, kernel 3.10.0-1160.53.1.el7, bpftool 3.10.0-1160.53.1.el7, python-perf 3.10.0-1160.53.1.el7, kernel-tools 3.10.0-1160.53.1.el7, kernel-tools-libs 3.10.0-1160.53.1.el7, +2 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.53.1.el7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.53.1.el7fixed: vendor fix RHSA-2022:0063
-
Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-trace 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.53.1.rt56.1193.el7 Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-kvm 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-trace 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-debug-kvm 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-trace-kvm 3.10.0-1160.53.1.rt56.1193.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.53.1.rt56.1193.el7fixed: vendor fix RHSA-2022:0065
show 6 moreshow fewer
-
Red Hat Enterprise Linux Real Time (v. 8) kernel-rt 4.18.0-305.rt7.72.el8, kernel-rt-core 4.18.0-305.rt7.72.el8, kernel-rt-modules 4.18.0-305.rt7.72.el8, kernel-rt-debug-core 4.18.0-305.rt7.72.el8, kernel-rt-debug-modules 4.18.0-305.rt7.72.el8, kernel-rt-modules-extra 4.18.0-305.rt7.72.el8, +2 morefixed: vendor fix RHSA-2021:1739
-
Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-core 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-modules 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-core 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-modules 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-modules-extra 4.18.0-193.60.2.rt13.112.el8_2, +2 morefixed: vendor fix RHSA-2021:2719
-
Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-305.rt7.72.el8, kernel-rt-kvm 4.18.0-305.rt7.72.el8, kernel-rt-core 4.18.0-305.rt7.72.el8, kernel-rt-modules 4.18.0-305.rt7.72.el8, kernel-rt-debug-kvm 4.18.0-305.rt7.72.el8, kernel-rt-debug-core 4.18.0-305.rt7.72.el8, +4 morefixed: vendor fix RHSA-2021:1739
-
Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-kvm 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-core 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-modules 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-kvm 4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-core 4.18.0-193.60.2.rt13.112.el8_2, +4 morefixed: vendor fix RHSA-2021:2719
-
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-1160.53.1.el7, kernel 3.10.0-1160.53.1.el7, bpftool 3.10.0-1160.53.1.el7, python-perf 3.10.0-1160.53.1.el7, kernel-kdump 3.10.0-1160.53.1.el7, kernel-tools 3.10.0-1160.53.1.el7, +7 more Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-1160.53.1.el7, kernel-debuginfo-common-x86_64 3.10.0-1160.53.1.el7, kernel-debuginfo-common-ppc64le 3.10.0-1160.53.1.el7 Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-1160.53.1.el7, kernel 3.10.0-1160.53.1.el7, bpftool 3.10.0-1160.53.1.el7, python-perf 3.10.0-1160.53.1.el7, kernel-tools 3.10.0-1160.53.1.el7, kernel-tools-libs 3.10.0-1160.53.1.el7, +2 more Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.53.1.el7fixed: vendor fix RHSA-2022:0063
-
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux Client (v. 7) kernel-headers 3.10.0-1160.53.1.el7 Red Hat Enterprise Linux Server (v. 7) kernel-headers 3.10.0-1160.53.1.el7 Red Hat Enterprise Linux Workstation (v. 7) kernel-headers 3.10.0-1160.53.1.el7not affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.35% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.9 | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Affected products
- n/a kernel
Classification
- Weakness
-
- CWE-401 Missing Release of Memory after Effective Lifetime
- Technology feeds
References
-
git.kernel.org
/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00
patch, vendor-advisory
-
bugzilla.redhat.com
/show_bug.cgi?id=1895961
issue-tracking, third-party-advisory
-
openwall.com
/lists/oss-security/2020/11/09/1
mailing-list
-
lists.debian.org
/debian-lts-announce/2020/12/msg00015.html
mailing-list, third-party-advisory
-
lists.debian.org
/debian-lts-announce/2020/12/msg00027.html
mailing-list, third-party-advisory
-
starwindsoftware.com
/security/sw-20220802-0003/
third-party-advisory
Sources
- CVE List CVE-2020-25704
- NVD CVE-2020-25704
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.