CVE-2020-12659: Linux Kernel

Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

Affected products

• Linux Linux Kernel: from 4.18, before 4.19.118 (fixed in 4.19.118); from 4.20, before 5.4.35 (fixed in 5.4.35); from 5.5, before 5.6.7 (fixed in 5.6.7)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Aff Baseboard Management Controller: version a700s only
• Netapp Cloud Backup: affected versions not specified
• Netapp Hci Baseboard Management Controller: version h300s only; version h410c only; version h410s only; version h500s only; version h610c only; version h610s only; …
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire Baseboard Management Controller: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2020-05-05. Last modified 2026-06-17.