PT-2020-2430 · Linux+4 · Linux Kernel+4

Published 2020-05-08 · Updated 2022-04-26 · CVE-2020-12771

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.6.11

Description An issue in the Linux kernel exists due to insufficient input validation in the btree gc coalesce function, located in drivers/md/bcache/btree.c. This can lead to a deadlock if a coalescing operation fails, potentially allowing an attacker to cause a denial of service.

Recommendations For Linux kernel versions prior to 5.6.11, consider applying configuration changes to minimize the risk of exploitation, such as restricting access to the btree gc coalesce function in drivers/md/bcache/btree.c until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

RCE

Weakness Enumeration

CWE-667

CWE-20

Related Identifiers

ALT-PU-2020-1944

ALT-PU-2020-1950

ALT-PU-2020-2153

ALT-PU-2020-2155

ALT-PU-2020-2158

ALT-PU-2020-2164

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-02432

CVE-2020-12771

DLA-2323-1

DLA-2420-1

DLA-2420-2

OPENSUSE-SU-2020:1062-1

OPENSUSE-SU-2020:1153-1

OPENSUSE-SU-2020_1062-1

OPENSUSE-SU-2020_1153-1

OPENSUSE-SU-2021:0242-1

OPENSUSE-SU-2021_0242-1

SUSE-SU-2020:2027-1

SUSE-SU-2020:2103-1

SUSE-SU-2020:2105-1

SUSE-SU-2020:2106-1

SUSE-SU-2020:2107-1

SUSE-SU-2020:2119-1

SUSE-SU-2020:2121-1

SUSE-SU-2020:2122-1

SUSE-SU-2020:2134-1

SUSE-SU-2020:2152-1

SUSE-SU-2020:2478-1

SUSE-SU-2020:2487-1

USN-4462-1

USN-4463-1

USN-4465-1

USN-4483-1

USN-4485-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1151

• 🔥 https://lkml.org/lkml/2020/4/26/87 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2020:2134-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2121-1 · Vendor Advisory
• https://usn.ubuntu.com/4485-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12656 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9473.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15393 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4465-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12771 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13974 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02432 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-12771 · Vendor Advisory
• https://usn.ubuntu.com/4465-1 · Vendor Advisory