CVE-2019-20636: Linux Kernel

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

Affected products

• Linux Linux Kernel: before 3.16.83 (fixed in 3.16.83); from 3.17, before 4.4.210 (fixed in 4.4.210); from 4.5, before 4.9.210 (fixed in 4.9.210); from 4.10, before 4.14.165 (fixed in 4.14.165); from 4.15, before 4.19.96 (fixed in 4.19.96); from 4.20, before 5.4.12 (fixed in 5.4.12)
• Netapp Cloud Backup: affected versions not specified
• Netapp Fas 8300: affected versions not specified
• Netapp Fas 8700: affected versions not specified
• Netapp Fas a400: affected versions not specified
• Netapp Fas Baseboard Management Controller a220: affected versions not specified
• Netapp Fas Baseboard Management Controller a320: affected versions not specified
• Netapp Fas Baseboard Management Controller a800: affected versions not specified
• Netapp Fas Baseboard Management Controller c190: affected versions not specified
• Netapp h300s: affected versions not specified
• Netapp h410s: affected versions not specified
• Netapp h500s: affected versions not specified
• Netapp h610c: affected versions not specified
• Netapp h610s: affected versions not specified
• Netapp h615c: affected versions not specified
• Netapp h700s: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2020-04-08. Last modified 2026-06-17.