CVE-2020-14386: Debian Linux

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only
• Linux Linux Kernel: from 4.6, before 4.9.239 (fixed in 4.9.239); from 4.10, before 4.14.201 (fixed in 4.14.201); from 4.15, before 4.19.150 (fixed in 4.19.150); from 4.20, before 5.4.64 (fixed in 5.4.64); from 5.5, before 5.8.8 (fixed in 5.8.8); version 5.9.0 only
• Opensuse Leap: version 15.1 only

Published 2020-09-16. Last modified 2026-06-17.