Security readout for executives and security teams
CVE-2020-25669 is a Linux kernel use-after-free in the sunkbd keyboard handling code. A scheduled reinitialization routine can keep using an object after it is freed. The bundle does not provide a CVSS score or active exploitation evidence, so urgency depends on whether affected kernels or vendor appliances are present. Evidence names Linux Kernel 5.9.4 and downstream Debian LTS Linux package updates. Exposure should be determined by kernel version, vendor backports, and any appliances whose vendor advisories list this CVE. The bundle does not establish broad internet-facing exposure. Set priority to moderate operational follow-up unless affected assets are confirmed in sensitive environments. No active exploitation is cited, but kernel memory-safety flaws can become serious when reachable on important systems. Track patch completion through normal vulnerability management. Mitigation focus: Apply Linux kernel updates from the system or appliance vendor.; For Debian LTS systems, review the cited DLA kernel security updates.; Check whether the upstream Linux commit is included or backported..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-416: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2020-25669 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- [debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security updateCVE reference · mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security updateCVE reference · mailing-list, x_refsource_MLIST
- https://www.openwall.com/lists/oss-security/2020/11/05/2%2CCVE reference · x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2020/11/20/5%2CCVE reference · x_refsource_MISC
- https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7eCVE reference · x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210702-0006/CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Use After Free
Use After Free represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.