CVE-2020-9391

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

• CWE-787

• http://www.openwall.com/lists/oss-security/2020/02/25/6Exploit, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1797052Exploit, Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663aMailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4LH35HOPBJIKYHYFXMBBM75DN75PZHZ/
• https://security.netapp.com/advisory/ntap-20200313-0003/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/02/25/6Exploit, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1797052Exploit, Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663aMailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4LH35HOPBJIKYHYFXMBBM75DN75PZHZ/
• https://security.netapp.com/advisory/ntap-20200313-0003/Third Party Advisory

Published

Feb 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9385A NULL Pointer Dereference exists in libzint in Zint 2.7.1 b…7.5
• CVE-2020-9386In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19…4.3
• CVE-2020-9387In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, acc…4.3
• CVE-2020-9388CSRF protection was not present in SquaredUp before version …6.5
• CVE-2020-9389A username enumeration issue was discovered in SquaredUp bef…3.7
• CVE-2020-9390SquaredUp allowed Stored XSS before version 4.6.0. A user wa…5.4
• CVE-2020-9392An issue was discovered in the pricing-table-by-supsystic pl…7.3
• CVE-2020-9393An issue was discovered in the pricing-table-by-supsystic pl…6.1
• CVE-2020-9394An issue was discovered in the pricing-table-by-supsystic pl…8.8
• CVE-2020-9395An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL…8
• CVE-2020-9398ISPConfig before 3.1.15p3, when the undocumented reverse_pro…9.8
• CVE-2020-9399The Avast AV parsing engine allows virus-detection bypass vi…5.5