CVE-2020-28941

An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.

• CWE-763
• CWE-763

• http://www.openwall.com/lists/oss-security/2020/11/19/5Mailing List, Patch, Third Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4122754442799187d5d537a9c039a49a67e57f1Patch, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git/commit/?h=tty-linus&id=d4122754442799187d5d537a9c039a49a67e57f1Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/d4122754442799187d5d537a9c039a49a67e57f1Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/
• https://www.openwall.com/lists/oss-security/2020/11/19/3Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/11/19/5Mailing List, Patch, Third Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4122754442799187d5d537a9c039a49a67e57f1Patch, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git/commit/?h=tty-linus&id=d4122754442799187d5d537a9c039a49a67e57f1Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/d4122754442799187d5d537a9c039a49a67e57f1Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/
• https://www.openwall.com/lists/oss-security/2020/11/19/3Mailing List, Patch, Third Party Advisory

Published

Nov 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28935NLnet Labs Unbound, up to and including version 1.12.0, and …5.5
• CVE-2020-28937OpenClinic version 0.8.2 is affected by a missing authentica…7.5
• CVE-2020-28938OpenClinic version 0.8.2 is affected by a stored XSS vulnera…5.4
• CVE-2020-28939OpenClinic version 0.8.2 is affected by a medical/test_new.p…7.2
• CVE-2020-2894Vulnerability in the Oracle VM VirtualBox product of Oracle …6
• CVE-2020-28940On Western Digital My Cloud OS 5 devices before 5.06.115, th…9.8
• CVE-2020-28942An issue exists in PrimeKey EJBCA before 7.4.3 when enrollin…4.3
• CVE-2020-28943OX App Suite 7.10.4 and earlier allows SSRF via a snippet.6.5
• CVE-2020-28944OX Guard 2.10.4 and earlier allows a Denial of Service via a…7.5
• CVE-2020-28945OX App Suite 7.10.4 and earlier allows XSS via crafted conte…6.1
• CVE-2020-28946An improper webserver configuration on Plum IK-401 devices w…7.5
• CVE-2020-28947In MISP 2.4.134, XSS exists in the template element index vi…6.1