CVE-2020-10781

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

• CWE-732
• CWE-732

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10781Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=853eab68afc80f59f36bbdeb715e5c88c501e680Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00025.htmlMailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/18/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10781Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=853eab68afc80f59f36bbdeb715e5c88c501e680Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00025.htmlMailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/18/1Mailing List, Patch, Third Party Advisory

Published

Sep 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10776A flaw was found in Keycloak before version 12.0.0, where it…4.8
• CVE-2020-10777A cross-site scripting flaw was found in Report Menu feature…5.4
• CVE-2020-10778In Red Hat CloudForms 4.7 and 5, the read only widgets can b…6
• CVE-2020-10779Red Hat CloudForms 4.7 and 5 leads to insecure direct object…6.5
• CVE-2020-1078An elevation of privilege vulnerability exists in Windows In…7.8
• CVE-2020-10780Red Hat CloudForms 4.7 and 5 is affected by CSV Injection fl…6.3
• CVE-2020-10782An exposure of sensitive information flaw was found in Ansib…6.5
• CVE-2020-10783Red Hat CloudForms 4.7 and 5 is affected by a role-based pri…8.3
• CVE-2020-10786A remote command execution in Vesta Control Panel through 0.…8.8
• CVE-2020-10787An elevation of privilege in Vesta Control Panel through 0.9…8.8
• CVE-2020-10788openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bce…9.1
• CVE-2020-10789openITCOCKPIT before 3.7.3 has a web-based terminal that all…9.8