CVE-2020-25221: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.

Affected products

• Linux Linux Kernel: from 5.7.0, before 5.8.7 (fixed in 5.8.7)
• Netapp Cloud Backup: affected versions not specified
• Netapp Hci Compute Node: affected versions not specified
• Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire Baseboard Management Controller: affected versions not specified

Published 2020-09-10. Last modified 2026-06-17.