PT-2020-2429 · Linux+7 · Linux Kernel+7

Published 2020-04-14 · Updated 2025-01-24 · CVE-2020-12770

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.6.11

Description The issue is related to the sg write function in the Linux kernel, which is associated with a use-after-free memory vulnerability. This could potentially allow an attacker to execute arbitrary code.

Recommendations For Linux kernel versions prior to 5.6.11, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2020:4431

ALT-PU-2020-1944

ALT-PU-2020-1950

ALT-PU-2020-2153

ALT-PU-2020-2155

ALT-PU-2020-2158

ALT-PU-2020-2164

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-02431

CESA-2020_4060

CESA-2020_4431

CESA-2020_4609

CVE-2020-12770

DLA-2241-1

DLA-2241-2

DLA-2242-1

DSA-4698-1

DSA-4699-1

MGASA-2020-0227

MGASA-2020-0228

OPENSUSE-SU-2021:3179-1

OPENSUSE-SU-2021:3205-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_3179-1

OPENSUSE-SU-2021_3205-1

OPENSUSE-SU-2021_3876-1

OPENSUSE-SU-2025_0229-1

RHSA-2020:4060

RHSA-2020:4062

RHSA-2020:4431

RHSA-2020:4609

RHSA-2020:5206

RHSA-2020:5430

RHSA-2020:5656

RHSA-2020_4060

RHSA-2020_4062

RHSA-2020_4431

RHSA-2020_4609

SUSE-SU-2021:3179-1

SUSE-SU-2021:3205-1

SUSE-SU-2021:3205-2

SUSE-SU-2021:3206-1

SUSE-SU-2021:3217-1

SUSE-SU-2021:3415-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

SUSE-SU-2021_3179-1

SUSE-SU-2021_3205-1

SUSE-SU-2021_3415-1

SUSE-SU-2022:14905-1

SUSE-SU-2022_14905-1

SUSE-SU-2025:0229-1

USN-4411-1

USN-4412-1

USN-4413-1

USN-4414-1

USN-4419-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 704

• https://osv.dev/vulnerability/SUSE-SU-2021:3876-1 · Vendor Advisory
• https://debian.org/security/2020/dsa-4698 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3205-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-10690 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4698-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-10732 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4419-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19039 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ES5C6ZCMALBEBMKNNCTBSLLSYGFZG3FF · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:14905-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3206-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0227.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3179-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4431.html · Vendor Advisory