Vulnerability · Published Apr 7, 2023 · Assigned by canonical
CVE-2020-11935aufs: improperly managed inode reference counts in the vfsub_dentry_open() method
Medium 4.4
In plain English
A medium-severity security flaw in Linux kernel (aufs filesystem module) from Ubuntu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.2%top 90.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | linux | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-aws | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-aws | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-aws-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-aws-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-azure | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-azure | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-fde-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-azure-nvidia-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-gcp | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-gcp | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gcp-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gcp-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-hwe-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-hwe-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-intel-iotg | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-kvm | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-nvidia-bos | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oem-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-oem-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-oracle | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-oracle | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oracle-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-oracle-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-raspi | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-raspi | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-realtime | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:25.10 | linux-riscv | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:26.10 | linux-riscv | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-riscv-6.17 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-riscv-7.0 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-vmware | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:24.04:LTS | linux-xilinx | no fix listed | UBUNTU-CVE-2020-11935 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | no fix listed | UBUNTU-CVE-2020-11935 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu | Linux kernel (aufs filesystem module) | see references |
Weakness: CWE-911 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References
- Ubuntu Security CVE-2020-11935 vendor-advisory
- Launchpad Bug 1873074 vendor-advisory