CVE-2020-12465: Linux Kernel

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.

Affected products

• Linux Linux Kernel: from 4.16, before 4.19.111 (fixed in 4.19.111); from 4.20, before 5.4.26 (fixed in 5.4.26); from 5.5, before 5.5.10 (fixed in 5.5.10)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Aff Baseboard Management Controller: version a700s only
• Netapp Cloud Backup: affected versions not specified
• Netapp Hci Baseboard Management Controller: version h300s only; version h410c only; version h410s only; version h500s only; version h610c only; version h610s only; …
• Netapp Hci Compute Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire Baseboard Management Controller: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2020-04-29. Last modified 2026-06-17.