PT-2020-1258 · Linux+3 · Linux Kernel+3
Jann Horn
·
Published
2020-06-02
·
Updated
2023-11-09
·
CVE-2020-29374
CVSS v3.1
3.6
Low
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.7.3
Description
The issue is related to the get user pages (aka gup) implementation in mm/gup.c and mm/huge memory.c, which does not properly consider the semantics of read operations when used for a copy-on-write page, granting unintended write access. This can lead to a race condition, allowing an attacker to cause a denial of service or potentially escalate privileges locally without needing additional execution privileges. User interaction is not required for exploitation.
Recommendations
For Linux kernel versions prior to 5.7.3, update to version 5.7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the
get user pages() function to minimize the risk of exploitation.Exploit
Fix
Incorrect Authorization
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu