High severity7.8NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026
CVE-2020-8835
CVE-2020-8835
Description
In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:a320_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
12- git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/nvdPatchVendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2020/03/30/3nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2021/07/20/1nvdExploitMailing ListThird Party Advisory
- security.netapp.com/advisory/ntap-20200430-0004/nvdThird Party Advisory
- usn.ubuntu.com/4313-1/nvdThird Party Advisory
- usn.ubuntu.com/usn/usn-4313-1nvdThird Party Advisory
- www.thezdi.com/blog/2020/3/19/pwn2own-2020-day-one-resultsnvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7OONYGMSYBEFHLHZJK3GOI5Z553G4LD/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF4PQZBEPNXDSK5DOBMW54OCLP25FTCD/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBWSHZ6DJIZVXKXGZPK6QPFCY7VKZEG/nvd
- lore.kernel.org/bpf/20200330160324.15259-1-daniel%40iogearbox.net/T/nvd
News mentions
0No linked articles in our index yet.