{"id":"CVE-2020-27835","details":"A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.","modified":"2026-04-16T04:37:57.934835336Z","published":"2021-01-07T18:15:13.137Z","related":["ALSA-2021:1578","SUSE-SU-2021:0347-1","SUSE-SU-2021:0348-1","SUSE-SU-2021:0353-1","SUSE-SU-2021:0354-1","SUSE-SU-2021:0427-1","SUSE-SU-2021:0433-1","SUSE-SU-2021:0434-1","SUSE-SU-2021:0438-1","SUSE-SU-2021:0452-1","SUSE-SU-2021:0532-1","SUSE-SU-2022:1669-1","SUSE-SU-2022:1676-1","SUSE-SU-2022:1687-1","SUSE-SU-2025:1194-1","SUSE-SU-2025:1263-1","openSUSE-SU-2021:0060-1"],"references":[{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901709"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"5.9"}]},{"events":[{"introduced":"0"},{"last_affected":"5.10-rc1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.10-rc2"}]},{"events":[{"introduced":"0"},{"last_affected":"5.10-rc3"}]},{"events":[{"introduced":"0"},{"last_affected":"5.10-rc4"}]},{"events":[{"introduced":"0"},{"last_affected":"5.10-rc5"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27835.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}]}