PT-2020-16156 · Linux+5 · Linux Kernel+5

Kiyin + 1 · Published 2019-12-14 · Updated 2023-02-12 · CVE-2020-25673

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability was found in the Linux kernel where a non-blocking socket in the llcp sock connect() function leads to a leak and eventually causes the system to hang.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2019-3291

ALT-PU-2019-3343

ALT-PU-2019-3369

ALT-PU-2020-1198

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1501

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2020-25673

OPENSUSE-SU-2021:0579-1

OPENSUSE-SU-2021:0758-1

OPENSUSE-SU-2021:1975-1

OPENSUSE-SU-2021:1977-1

OPENSUSE-SU-2021_0579-1

OPENSUSE-SU-2021_0758-1

OPENSUSE-SU-2021_1975-1

OPENSUSE-SU-2021_1977-1

SUSE-SU-2021:1210-1

SUSE-SU-2021:1211-1

SUSE-SU-2021:1238-1

SUSE-SU-2021:1248-1

SUSE-SU-2021:1266-1

SUSE-SU-2021:1301-1

SUSE-SU-2021:1573-1

SUSE-SU-2021:1596-1

SUSE-SU-2021:1617-1

SUSE-SU-2021:1623-1

SUSE-SU-2021:1624-1

SUSE-SU-2021:1625-1

SUSE-SU-2021:1975-1

SUSE-SU-2021:1977-1

SUSE-SU-2022:0234-1

SUSE-SU-2022:0243-1

SUSE-SU-2022:0255-1

SUSE-SU-2022:0263-1

SUSE-SU-2022:0291-1

SUSE-SU-2022:0293-1

SUSE-SU-2022:0296-1

SUSE-SU-2022:0325-1

USN-4977-1

USN-4979-1

USN-4982-1

USN-4999-1

USN-5343-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 628

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/PaloAltoNetworks/can-ctr-escape-cve-2022-0492 · Exploit
• 🔥 https://github.com/chenaotian/CVE-2022-0492 · Exploit
• 🔥 https://github.com/0xdevil/CVE-2021-42008 · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-10207 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit