CVE-2020-25641

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

• CWE-835
• CWE-835

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/10/06/9Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1881424Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e24969022cbd61ddc586f14824fc205661bb124Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4576-1/Third Party Advisory
• https://www.kernel.org/doc/html/latest/block/biovecs.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/10/06/9Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1881424Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e24969022cbd61ddc586f14824fc205661bb124Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4576-1/Third Party Advisory
• https://www.kernel.org/doc/html/latest/block/biovecs.htmlVendor Advisory

Published

Oct 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25636A flaw was found in Ansible Base when using the aws_ssm conn…7.1
• CVE-2020-25637A double free memory issue was found to occur in the libvirt…6.7
• CVE-2020-25638A flaw was found in hibernate-core in versions prior to and …7.4
• CVE-2020-25639A NULL pointer dereference flaw was found in the Linux kerne…4.4
• CVE-2020-2564Vulnerability in the Siebel UI Framework product of Oracle S…5.3
• CVE-2020-25640A flaw was discovered in WildFly before 21.0.0.Final where, …5.3
• CVE-2020-25643A flaw was found in the HDLC_PPP module of the Linux kernel …7.2
• CVE-2020-25644A memory leak flaw was found in WildFly OpenSSL in versions …7.5
• CVE-2020-25645A flaw was found in the Linux kernel in versions before 5.9-…7.5
• CVE-2020-25646A flaw was found in Ansible Collection community.crypto. ope…7.5
• CVE-2020-25647A flaw was found in grub2 in versions prior to 2.06. During …7.6
• CVE-2020-25648A flaw was found in the way NSS handled CCS (ChangeCipherSpe…7.5