CVE-2020-8649

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.

• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.htmlThird Party Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=206357Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00012.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00013.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4698Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.htmlThird Party Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=206357Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00012.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00013.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4698Third Party Advisory

Published

Feb 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8639An unrestricted file upload vulnerability in keywordsImport.…8.8
• CVE-2020-8641Lotus Core CMS 1.0.1 allows authenticated Local File Inclusi…8.8
• CVE-2020-8644PlaySMS before 1.4.3 does not sanitize inputs from a malicio…9.8
• CVE-2020-8645An issue was discovered in Simplejobscript.com SJS through 1…9.8
• CVE-2020-8647There is a use-after-free vulnerability in the Linux kernel …6.1
• CVE-2020-8648There is a use-after-free vulnerability in the Linux kernel …7.1
• CVE-2020-8654An issue was discovered in EyesOfNetwork 5.3. An authenticat…8.8
• CVE-2020-8655An issue was discovered in EyesOfNetwork 5.3. The sudoers co…7.8
• CVE-2020-8656An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetw…9.8
• CVE-2020-8657An issue was discovered in EyesOfNetwork 5.3. The installati…9.8
• CVE-2020-8658The BestWebSoft Htaccess plugin through 1.8.1 for WordPress …8.8
• CVE-2020-8659CNCF Envoy through 1.13.0 may consume excessive amounts of m…7.5