PT-2020-2225 · Linux+7 · Linux Kernel+7

Bui Quang Minh · Published 2020-04-15 · Updated 2024-02-01 · CVE-2020-12659

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.6.7

Description An issue in the Linux kernel allows for an out-of-bounds write due to a lack of headroom validation in xdp umem reg in net/xdp/xdp umem.c. This can be exploited by a user with the CAP NET ADMIN capability. The issue may impact the confidentiality, integrity, and availability of protected information.

Recommendations For Linux kernel versions prior to 5.6.7, update to version 5.6.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET ADMIN capability to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALSA-2020:4431

ALT-PU-2020-1913

ALT-PU-2020-1917

ALT-PU-2020-1928

ALT-PU-2020-1929

ALT-PU-2020-2153

ALT-PU-2020-2164

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-02141

CESA-2020_4431

CESA-2020_4609

CVE-2020-12659

MGASA-2020-0201

MGASA-2020-0228

OPENSUSE-SU-2020:0801-1

OPENSUSE-SU-2020_0801-1

RHSA-2020:4431

RHSA-2020:4609

RHSA-2020_4431

RHSA-2020_4609

SUSE-SU-2020:1587-1

SUSE-SU-2020:1599-1

SUSE-SU-2020:1602-1

SUSE-SU-2020:1604-1

SUSE-SU-2020:2478-1

SUSE-SU-2020:2487-1

SUSE-SU-2020_1587-1

SUSE-SU-2020_1599-1

SUSE-SU-2020_1602-1

SUSE-SU-2020_1604-1

USN-4387-1

USN-4388-1

USN-4389-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 447

• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=207225 · Exploit
• https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 · Patch
• https://cve.org/CVERecord?id=CVE-2020-12659 · Security Note
• https://usn.ubuntu.com/4387-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-5714.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12659 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12659 · Security Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12659 · Vendor Advisory
• https://usn.ubuntu.com/4388-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4431.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12464 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4388-1 · Vendor Advisory
• https://usn.ubuntu.com/4389-1 · Vendor Advisory