CVE-2020-25704: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

Affected products

• Debian Debian Linux: version 9.0 only
• Linux Linux Kernel: up to and including 5.9; version 5.10 only
• Starwindsoftware Command Center: affected versions not specified
• Starwindsoftware Starwind Hyperconverged Appliance: affected versions not specified
• Starwindsoftware Starwind San & NAS: version v8r12 only
• Starwindsoftware Starwind Virtual San: version v8 only

Published 2020-12-02. Last modified 2026-06-17.