PT-2020-12286 · Linux+5 · Linux Kernel+5

Guilherme De Almeida Suckevicz

·

Published

2019-11-25

·

Updated

2021-12-20

·

CVE-2020-10690

CVSS v3.1

6.5

Medium

VectorAV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.5
Description The issue is caused by a use-after-free due to a race condition between the release of ptp clock and cdev while resource deallocation. This occurs when a high-privileged process allocates a ptp device file and goes to sleep, and during this time, the underlying device is removed. As the process wakes up to terminate and clean all attached files, the system crashes due to the cdev structure being invalid, as it has already been freed.
Recommendations For Linux kernel versions prior to 5.5, update to version 5.5 or later to resolve the issue. As a temporary workaround, consider restricting access to ptp device files to minimize the risk of exploitation.

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2020-1145
ALT-PU-2020-1251
ALT-PU-2020-1421
ALT-PU-2020-1450
ALT-PU-2020-1714
ALT-PU-2020-2164
ALT-PU-2021-1621
ALT-PU-2021-1656
ALT-PU-2021-1739
ALT-PU-2021-1862
ALT-PU-2021-1866
ALT-PU-2021-1870
CESA-2020_1567
CESA-2020_1769
CESA-2020_4060
CVE-2020-10690
DLA-2241-1
DLA-2241-2
OPENSUSE-SU-2020:0801-1
OPENSUSE-SU-2020_0801-1
RHSA-2020:1567
RHSA-2020:1769
RHSA-2020:4060
RHSA-2020:4062
RHSA-2020_1567
RHSA-2020_1769
RHSA-2020_4060
RHSA-2020_4062
SUSE-SU-2020:1255-1
SUSE-SU-2020:1275-1
SUSE-SU-2020:14393-1
SUSE-SU-2020:1587-1
SUSE-SU-2020:1599-1
SUSE-SU-2020:1602-1
SUSE-SU-2020:1603-1
SUSE-SU-2020:1604-1
SUSE-SU-2020:1605-1
SUSE-SU-2020:1663-1
SUSE-SU-2020:2156-1
SUSE-SU-2020:2478-1
SUSE-SU-2020:2487-1
SUSE-SU-2020_1587-1
SUSE-SU-2020_1599-1
SUSE-SU-2020_1602-1
SUSE-SU-2020_1603-1
SUSE-SU-2020_1604-1
SUSE-SU-2020_1605-1
SUSE-SU-2020_1663-1
USN-4419-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu