CVE-2020-8835 - CVE House
Back to Database
Status published High CVE-2020-8835

Linux kernel bpf verifier vulnerability

Vulnerability Description

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8835

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Manfred Paul
  • Anatoly Trosinenko

References

More from Linux kernel

View All →
CVE-2020-8834
Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1
Medium 6.5
CVE-2020-16120
Unprivileged overlay + shiftfs read access
Medium 5.1
CVE-2020-10732
A flaw was found in the Linux kernel's implementation of...
Low 3.3
CVE-2019-14898
The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10...
High 7
CVE-2012-0055
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in...
High 7.8

Affected Vendor

Linux kernel

View all reports →

Affected Software

Linux kernel
Vulnerable Versions:
5.6-stable, 5.5-stable, 5.4.7

Timeline

Official Publish: April 2nd, 2020
Last Modified: September 17th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.