PT-2020-5209 · Linux+8 · Linux Kernel+8

Published 2020-09-25 · Updated 2021-11-04 · CVE-2020-14351

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free memory flaw was found in the perf subsystem of the Linux kernel, allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2021:0558

ALT-PU-2020-3058

ALT-PU-2020-3211

ALT-PU-2020-3553

ALT-PU-2020-3570

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-05832

CESA-2021_0537

CESA-2021_0558

CESA-2021_0856

CVE-2020-14351

DLA-2483-1

DLA-2494-1

MGASA-2021-0030

MGASA-2021-0031

OESA-2021-1003

OPENSUSE-SU-2020:1906-1

OPENSUSE-SU-2020:2112-1

OPENSUSE-SU-2020_1906-1

OPENSUSE-SU-2020_2112-1

OPENSUSE-SU-2021:0242-1

OPENSUSE-SU-2021_0242-1

RHSA-2021:0537

RHSA-2021:0558

RHSA-2021:0686

RHSA-2021:0765

RHSA-2021:0774

RHSA-2021:0848

RHSA-2021:0856

RHSA-2021:0857

RHSA-2021:0878

RHSA-2021:1028

RHSA-2021:1267

RHSA-2021_0537

RHSA-2021_0558

RHSA-2021_0856

RHSA-2021_0857

SUSE-SU-2020:3122-1

SUSE-SU-2020:3272-1

SUSE-SU-2020:3281-1

SUSE-SU-2020:3326-1

SUSE-SU-2020:3484-1

SUSE-SU-2020:3491-1

SUSE-SU-2020:3501-1

SUSE-SU-2020:3503-1

SUSE-SU-2020:3512-1

SUSE-SU-2020:3513-1

SUSE-SU-2020:3522-1

SUSE-SU-2020:3532-1

SUSE-SU-2020:3544-1

SUSE-SU-2020_3122-1

USN-4657-1

USN-4658-1

USN-4658-2

USN-4659-1

USN-4660-1

USN-4660-2

USN-4912-1

ZDI-20-1372

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 1075

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/cgwalters/cve-2020-14386 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit