Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-27815

25
FAUCET Score

CVE-2020-27815 describes a flaw in the Linux Kernel's JFS filesystem code, allowing a local attacker to trigger a system panic, memory corruption, or privilege escalation by manipulating extended attributes. This vulnerability carries a high CVSS score of 7.8, indicating significant threats to confidentiality, integrity, and availability, with low attack complexity and no user interaction required. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
> 4.4.249CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.5, < 4.9.249CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.10, < 4.14.213CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.15, < 4.19.164CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.20, < 5.4.86CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.79%
Probability of exploitation in next 30 days
EPSS Percentile
52.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0079 is in the 88th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

microsoftpatch availablevia msrc
Product: 17917-16823Fixed in: 5.15.135.1-2
microsoftpatch availablevia msrc
Product: 17062-17084Fixed in: -
microsoftpatch availablevia msrc
Product: 19529-17084Fixed in: 6.6.29.1-4
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.29.1-4 on Azure Linux 3.0Fixed in: -
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.92.2-1 on Azure Linux 3.0Fixed in: 6.6.29.1-4
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.15.135.1-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.15.135.1-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.29.1-4
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.29.1-4
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.135.1-2 on CBL Mariner 2.0Fixed in: 5.15.135.1-2
capnprotovendor investigatingvia llm_extracted
gcpvendor investigatingvia llm_extracted
hanwhavendor investigatingvia llm_extracted
kongvendor investigatingvia llm_extracted
openwrtvendor investigatingvia llm_extracted
proxmoxvendor investigatingvia llm_extracted

Vendor Advisories (9)

microsoft2024-Jun/CVE-2020-27815

CVE-2020-27815

Jun 11, 2024
microsoft2021-May/CVE-2020-27815Important

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.

May 11, 2021
openwrtllm-openwrt-b814c0e383a6a281CRITICAL

ctrlX Multiple Vulnerabilities

Apr 23, 2021
gcpllm-gcp-01a119d0ea3516faCRITICAL

ctrlX Multiple Vulnerabilities

Apr 23, 2021
kongllm-kong-7933c1edf7557da9CRITICAL

ctrlX Multiple Vulnerabilities

Apr 23, 2021
hanwhallm-hanwha-0b610f8bff10f748CRITICAL

ctrlX Multiple Vulnerabilities

Apr 23, 2021
proxmoxllm-proxmox-202933dd58ce3ba3CRITICAL

ctrlX Multiple Vulnerabilities

Apr 23, 2021
capnprotollm-capnproto-5feb06313b602a85HIGH

ctrlX Multiple Vulnerabilities

Apr 23, 2021
redhatCVE-2020-27815Moderate

kernel: Array index out of bounds access when setting extended attributes on journaling filesystems.

Nov 30, 2020

References

bugzilla.redhat.com / show_bug.cgi
Issue Tracking
git.kernel.org / pub/scm/linux/kernel/git/torvalds/linux.git/commit
PatchVendor Advisory
lists.debian.org / debian-lts-announce/2021/02/msg00018.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2021/03/msg00010.html
Mailing ListThird Party Advisory
security.netapp.com / advisory/ntap-20210702-0004
Third Party Advisory
debian.org / security/2021/dsa-4843
Third Party Advisory
openwall.com / lists/oss-security/2020/11/30/5%2C
Mailing List
openwall.com / lists/oss-security/2020/12/28/1%2C
Mailing List
openwall.com / lists/oss-security/2020/11/30/5
ExploitMailing ListThird Party Advisory
openwall.com / lists/oss-security/2020/12/28/1
ExploitMailing ListPatchThird Party Advisory