PT-2020-1811 · Linux+3 · Linux Kernel+3

Shijie Luo · Published 2020-02-13 · Updated 2022-04-27 · CVE-2020-8992

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.5.3

Description The issue is related to the ext4 protect reserved inode function in the Linux kernel, which can lead to a denial of service (soft lockup) when exploited. This is caused by an uncontrolled resource consumption, allowing an attacker to disrupt the system.

Recommendations For Linux kernel versions through 5.5.3, update to a version newer than 5.5.3 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-834

CWE-400

Related Identifiers

ALT-PU-2020-1251

ALT-PU-2020-1316

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1714

ALT-PU-2020-2164

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-01073

CVE-2020-8992

OPENSUSE-SU-2020:0336-1

OPENSUSE-SU-2020_0336-1

SUSE-SU-2020:0511-1

SUSE-SU-2020:0558-1

SUSE-SU-2020:0559-1

SUSE-SU-2020:0560-1

SUSE-SU-2020:0580-1

SUSE-SU-2020:0584-1

SUSE-SU-2020:0649-1

SUSE-SU-2020:0667-1

SUSE-SU-2020:0688-1

SUSE-SU-2020:1255-1

SUSE-SU-2020:1275-1

SUSE-SU-2020:1663-1

SUSE-SU-2020_1663-1

USN-4318-1

USN-4324-1

USN-4342-1

USN-4344-1

USN-4419-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 564

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19319 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19927 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-10207 · Exploit