CVE-2020-27672: Debian Linux

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 31 only
• Opensuse Leap: version 15.1 only; version 15.2 only
• Xen Xen: from 3.2.0, up to and including 4.14.0

Published 2020-10-22. Last modified 2026-06-17.