{"id":"CVE-2020-25668","details":"A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.","aliases":["A-190228658","PUB-A-190228658"],"modified":"2026-04-16T00:01:19.724632628Z","published":"2021-05-26T12:15:15.687Z","related":["SUSE-SU-2020:3484-1","SUSE-SU-2020:3503-1","SUSE-SU-2020:3507-1","SUSE-SU-2020:3512-1","SUSE-SU-2020:3513-1","SUSE-SU-2020:3522-1","SUSE-SU-2020:3532-1","SUSE-SU-2020:3544-1","SUSE-SU-2020:3648-1","SUSE-SU-2020:3651-1","SUSE-SU-2020:3670-1","SUSE-SU-2020:3690-1","SUSE-SU-2020:3698-1","SUSE-SU-2020:3713-1","SUSE-SU-2020:3715-1","SUSE-SU-2020:3717-1","SUSE-SU-2020:3748-1","SUSE-SU-2021:0437-1","SUSE-SU-2021:14630-1","openSUSE-SU-2020:1906-1","openSUSE-SU-2020:2112-1","openSUSE-SU-2020:2260-1","openSUSE-SU-2021:0242-1","openSUSE-SU-2024:10728-1","openSUSE-SU-2024:13704-1"],"references":[{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2020/11/04/3%2C"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2020/10/30/1%2C"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210702-0005/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2020/11/04/3"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2020/10/30/1"},{"type":"FIX","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.242"}]},{"events":[{"introduced":"4.5"},{"fixed":"4.9.242"}]},{"events":[{"introduced":"4.10"},{"fixed":"4.14.204"}]},{"events":[{"introduced":"4.15"},{"fixed":"4.19.155"}]},{"events":[{"introduced":"4.20"},{"fixed":"5.4.75"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.9.5"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-25668.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}