CVE-2020-0066
Linux Debian vulnerability analysis and mitigation

Overview

CVE-2020-0066 is a vulnerability discovered in the netlink driver of Android kernel. The vulnerability was disclosed on March 10, 2020, and involves a possible out-of-bounds write condition that occurs due to a race condition. This security flaw affects Android kernel versions and various Linux distributions (Ubuntu Security, Debian Tracker).

Technical details

The vulnerability has been assigned a CVSS 3.1 base score of 6.4 (Medium severity). The attack vector is Local, with High attack complexity and requires High privileges for exploitation. The scope is Unchanged, with High impact on Confidentiality, Integrity, and Availability. No user interaction is required for exploitation (Ubuntu Security).

Impact

If successfully exploited, this vulnerability could lead to local privilege escalation with System execution privileges. The vulnerability affects system confidentiality, integrity, and availability with high impact ratings (Ubuntu Security).

Mitigation and workarounds

The vulnerability has been fixed in the Linux kernel. The fix was implemented through commit db65a3aaf29ecce2e34271d52e8d2336b97bd9fe in the Linux kernel repository. Various Linux distributions have released patches to address this vulnerability (Debian Tracker).

Additional resources


SourceThis report was generated using AI

Related Linux Debian vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-0821MEDIUM6.9
  • Linux DebianLinux Debian
  • quickjs
NoNoJan 10, 2026
CVE-2026-22703MEDIUM5.5
  • Linux DebianLinux Debian
  • cosign
NoNoJan 10, 2026
CVE-2026-0822MEDIUM5.3
  • Linux DebianLinux Debian
  • quickjs
NoNoJan 10, 2026
CVE-2025-15506MEDIUM4.8
  • Linux DebianLinux Debian
  • opencolorio
NoNoJan 11, 2026
CVE-2026-22702MEDIUM4.5
  • Linux DebianLinux Debian
  • python-virtualenv
NoNoJan 10, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management