CVE-2020-8991: Red Hat LVM2

Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days.

vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service through the bug

Affected products

• Red Hat LVM2: version 2.02.00 only

Published 2020-02-14. Last modified 2026-06-17.