CVE-2020-14390: Debian Linux

Medium severity, CVSS 5.6. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

Affected products

• Debian Debian Linux: version 9.0 only
• Linux Linux Kernel: from 2.2.3, before 5.9.0 (fixed in 5.9.0); version 5.9.0 only

Published 2020-09-18. Last modified 2026-10-08.