CVE-2020-8832

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Ubuntu	18.04 LTS (bionic) Linux kernel	>= 4.15.x kernels, < 4.15.0-91.92

References

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20200430-0004/Third Party Advisory
https://usn.ubuntu.com/usn/usn-4302-1Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20200430-0004/Third Party Advisory
https://usn.ubuntu.com/usn/usn-4302-1Third Party Advisory

Timeline

Published: Apr 10, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-88334.7Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation CVE-2020-88346.5KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{sa CVE-2020-88357.8In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit opera CVE-2020-88386.4An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and CVE-2020-88396.1Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.CVE-2020-88409.8FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedi CVE-2020-88418.8An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to auth CVE-2020-88437.4An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer po CVE-2020-88447.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction CVE-2020-88457.8This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interact CVE-2020-88467.8This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interact CVE-2020-88477.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction