Use-After-Free Vulnerability in Linux Kernel's Nouveau Driver

CVE-2020-27820 · MEDIUM Severity

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).

Learn more about our Cis Benchmark Audit For Bind.