CVE-2020-25656

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=1888726Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00027.htmlMailing List, Third Party Advisory
• https://lkml.org/lkml/2020/10/16/84Exploit, Mailing List, Third Party Advisory
• https://lkml.org/lkml/2020/10/29/528Mailing List, Patch, Third Party Advisory
• https://www.starwindsoftware.com/security/sw-20210325-0006/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1888726Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00027.htmlMailing List, Third Party Advisory
• https://lkml.org/lkml/2020/10/16/84Exploit, Mailing List, Third Party Advisory
• https://lkml.org/lkml/2020/10/29/528Mailing List, Patch, Third Party Advisory
• https://www.starwindsoftware.com/security/sw-20210325-0006/Third Party Advisory

Published

Dec 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25650A flaw was found in the way the spice-vdagentd daemon handle…5.5
• CVE-2020-25651A flaw was found in the SPICE file transfer protocol. File d…6.4
• CVE-2020-25652A flaw was found in the spice-vdagentd daemon, where it did …5.5
• CVE-2020-25653A race condition vulnerability was found in the way the spic…6.3
• CVE-2020-25654An ACL bypass flaw was found in pacemaker. An attacker havin…7.2
• CVE-2020-25655An issue was discovered in ManagedClusterView API, that coul…6.5
• CVE-2020-25657A flaw was found in all released versions of m2crypto, where…5.9
• CVE-2020-25658It was found that python-rsa is vulnerable to Bleichenbacher…5.9
• CVE-2020-25659python-cryptography 3.2 is vulnerable to Bleichenbacher timi…5.9
• CVE-2020-2566Vulnerability in the Oracle Applications Framework product o…4.7
• CVE-2020-25660A flaw was found in the Cephx authentication protocol in ver…8.8
• CVE-2020-25661A Red Hat only CVE-2020-12351 regression issue was found in …8.8