PT-2020-2427 · Linux+3 · Linux Kernel+3
Published
2020-01-03
·
Updated
2022-05-03
·
CVE-2020-12769
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.4.17
Description
The issue exists due to insufficient input validation in the drivers/spi/spi-dw.c component of the Linux kernel. This can be exploited by an attacker to cause a denial of service via concurrent calls to
dw spi irq and dw spi transfer one functions.Recommendations
For Linux kernel versions prior to 5.4.17, update to version 5.4.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the
drivers/spi/spi-dw.c component to minimize the risk of exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu