CVE-2020-29372: Canonical Ubuntu Linux

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only
• Linux Linux Kernel: before 5.6.8 (fixed in 5.6.8)

Published 2020-11-28. Last modified 2026-06-17.