PT-2020-1263 · Linux+8 · Linux Kernel+8
Jann Horn
·
Published
2020-12-04
·
Updated
2024-06-15
·
CVE-2020-29660
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.9.13
Description
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel. The drivers/tty/tty io.c and drivers/tty/tty jobctrl.c files may allow a read-after-free attack against TIOCGSID. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations
For Linux kernel versions prior to 5.9.13, update to a version 5.9.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components, such as the tty subsystem, to minimize the risk of exploitation. Avoid using the TIOCGSID functionality in the affected API endpoints until the issue is resolved. At the moment, there is no other information about additional mitigation measures.
Exploit
Fix
Improper Locking
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu