
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-0430 is a vulnerability discovered in the Linux kernel's network stack, specifically in the skb_headlen function of /include/linux/skbuff.h. The vulnerability was disclosed on September 17, 2020, affecting Android kernel versions and various Linux distributions (Ubuntu Security, NVD).
The vulnerability manifests as a possible out-of-bounds read condition due to memory corruption in the skb_headlen function. The issue has been assigned a CVSS 3 Severity Score of 7.8 (High), indicating its significant security impact (Ubuntu Security).
This vulnerability could lead to local escalation of privilege with no additional execution privileges needed. The exploitation does not require user interaction, making it particularly concerning for system security (Ubuntu Security).
Multiple Linux distributions have released patches to address this vulnerability. Ubuntu has fixed the issue in various kernel versions, including linux 18.04 LTS (4.15.0-44.47), linux-aws (4.15.0-1032.34), and several other kernel variants. The default Red Hat Enterprise Linux kernel prevents unprivileged users from exploiting this vulnerability through the kernel.unprivilegedbpfdisabled sysctl (Ubuntu Security, Red Hat Portal).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."