CVE-2020-0427: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171

Affected products

• Debian Debian Linux: version 9.0 only
• Google Android: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only
• Starwindsoftware Starwind Virtual San: version v8 only

Published 2020-09-17. Last modified 2026-06-17.