A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
4.4.0-197.2294.4.0-1118.1324.15.0-1088.93~16.04.14.15.0-1100.111~16.04.14.15.0-1088.101~16.04.14.15.0-126.129~16.04.14.10.0-14.16~16.04.14.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.3+13 more4.4.0-1084.934.15.0-1059.65~16.04.14.4.0-1142.152Exploitability
AV:NAC:LPR:HUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H