CVE-2020-10781: linux kernel 5.8.0; +2 more affected products

Affected technology

linux kernel · before 5.8.0 (exclusive)
linux

linux kernel · 5.8.0
linux

linux kernel · 5.8.0 · update rc1
linux

linux kernel · 5.8.0 · update rc2
linux

linux kernel · 5.8.0 · update rc3
linux

linux kernel · 5.8.0 · update rc4
linux

linux kernel · 5.8.0 · update rc5
linux

debian linux · 9.0
debian

kernel · before 5.8-rc6
Linux Kernel

Description’s affected range: before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.