PT-2020-1260 · Linux+7 · Linux Kernel+7
Jann Horn
·
Published
2020-06-03
·
Updated
2024-02-15
·
CVE-2020-29368
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.7.5
Description
The issue is related to the
split huge pmd function in the mm/huge memory.c file of the Linux kernel. It involves a race condition in a THP mapcount check, which can grant unintended write access due to the copy-on-write implementation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.Recommendations
For Linux kernel versions prior to 5.7.5, update to version 5.7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the
split huge pmd function until a patch is available. However, the most effective solution is to update the kernel to a version that includes the fix for this issue.Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu