CVE-2020-25639: Fedoraproject Fedora

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only
• Linux Linux Kernel: up to and including 5.11.2
• Red Hat Enterprise Linux: version 5.0 only; version 6.0 only; version 7.0 only; version 8.0 only
• Red Hat Messaging Realtime Grid: version 2.0 only
• Red Hat Openshift Container Platform: version 4.4 only; version 4.5 only; version 4.6 only

Published 2021-03-04. Last modified 2026-10-08.