
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-0066 is a vulnerability discovered in the netlink driver of Android kernel. The vulnerability was disclosed on March 10, 2020, and involves a possible out-of-bounds write condition that occurs due to a race condition. This security flaw affects Android kernel versions and various Linux distributions (Ubuntu Security, Debian Tracker).
The vulnerability has been assigned a CVSS 3.1 base score of 6.4 (Medium severity). The attack vector is Local, with High attack complexity and requires High privileges for exploitation. The scope is Unchanged, with High impact on Confidentiality, Integrity, and Availability. No user interaction is required for exploitation (Ubuntu Security).
If successfully exploited, this vulnerability could lead to local privilege escalation with System execution privileges. The vulnerability affects system confidentiality, integrity, and availability with high impact ratings (Ubuntu Security).
The vulnerability has been fixed in the Linux kernel. The fix was implemented through commit db65a3aaf29ecce2e34271d52e8d2336b97bd9fe in the Linux kernel repository. Various Linux distributions have released patches to address this vulnerability (Debian Tracker).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."