{"id":10271,"date":"2020-04-10T01:45:57","date_gmt":"2020-04-10T01:45:57","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=10271"},"modified":"2026-04-17T18:07:49","modified_gmt":"2026-04-17T18:07:49","slug":"linux-kernel-information-disclosure-and-privilege-escalation-vulnerability-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/linux-kernel-information-disclosure-and-privilege-escalation-vulnerability-threat-alert\/","title":{"rendered":"Linux Kernel Information Disclosure and Privilege Escalation Vulnerability Threat Alert"},"content":{"rendered":"


\n<\/p>\n

<\/a>Vulnerability Description<\/strong><\/h2>\n

On March 31, the Linux kernel privilege escalation vulnerability demonstrated by the competitor Manfred Paul on the Pwn2Own contest was included in the CVE database and identified as CVE-2020-8835. This vulnerability exists because the bpf verifier in the Linux kernel does not properly calculate register bounds for certain operations. A local attacker could exploit this vulnerability to read confidential information (kernel memory) or gain administrative privileges. Users should take preventive measures as soon as possible.<\/p>\n

<\/p>\n

Reference link:<\/p>\n

https:\/\/security-tracker.debian.org\/tracker\/CVE-2020-8835<\/p>\n

https:\/\/people.canonical.com\/~ubuntu-security\/cve\/2020\/CVE-2020-8835.html<\/p>\n

Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/strong><\/p>\n