{"action":"Upgrade lvm2 to 2.03.01-2 or later.","affected":[{"fixed":"2.03.01-2","introduced":"0"}],"component":"lvm2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.03.01-2"],"id":"tcs_01M5NF9A68ZGEFN42XRP0WPW9S","modified_at":"2026-09-11T11:02:50.514716236Z","published_at":"2020-02-14T05:15:13.573Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-8991","https://security-tracker.debian.org/tracker/CVE-2020-8991"],"severity":{"label":"low","score":2.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-8991","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-8991"}],"summary":"vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulner"}