CVE-2020-10774

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.

• CWE-805

• https://bugzilla.redhat.com/show_bug.cgi?id=1846964Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1846964Issue Tracking, Third Party Advisory

Published

May 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10769A buffer over-read flaw was found in RH kernel versions befo…5.5
• CVE-2020-1077An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-10770A flaw was found in Keycloak before 13.0.0, where it is poss…5.3
• CVE-2020-10771A flaw was found in Infinispan version 10, where it is possi…7.1
• CVE-2020-10772An incomplete fix for CVE-2020-12662 was shipped for Unbound…7.5
• CVE-2020-10773A stack information leak flaw was found in s390/s390x in the…4.4
• CVE-2020-10775An Open redirect vulnerability was found in ovirt-engine ver…5.3
• CVE-2020-10776A flaw was found in Keycloak before version 12.0.0, where it…4.8
• CVE-2020-10777A cross-site scripting flaw was found in Report Menu feature…5.4
• CVE-2020-10778In Red Hat CloudForms 4.7 and 5, the read only widgets can b…6
• CVE-2020-10779Red Hat CloudForms 4.7 and 5 leads to insecure direct object…6.5
• CVE-2020-1078An elevation of privilege vulnerability exists in Windows In…7.8