PT-2020-5371 · Linux+9 · Linux Kernel+9

Published 2020-09-15 · Updated 2022-12-23 · CVE-2020-26541

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.13

Description The issue is related to incorrect cryptographic signature verification in the Linux kernel. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information. The problem affects the Secure Boot Forbidden Signature Database protection mechanism, specifically in certs/blacklist.c and certs/system keyring.c.

Recommendations For Linux kernel versions prior to 5.8.13, update to version 5.8.13 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Exploit

Fix

Improper Verification of Cryptographic Signature

Information Disclosure

Weakness Enumeration

CWE-347

CWE-200

Related Identifiers

ALSA-2021:2570

ALT-PU-2020-2982

ALT-PU-2020-3069

ALT-PU-2020-3210

ALT-PU-2020-3553

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

ALT-PU-2021-2102

ALT-PU-2021-2103

ALT-PU-2021-2201

ALT-PU-2021-2207

ALT-PU-2021-2221

ALT-PU-2021-2370

ALT-PU-2021-2672

ALT-PU-2021-2677

ALT-PU-2021-2678

ALT-PU-2021-2737

ALT-PU-2021-2751

ALT-PU-2022-1240

BDU:2021-00284

CESA-2021_2570

CESA-2021_2599

CVE-2020-26541

MGASA-2021-0347

MGASA-2021-0348

OPENSUSE-SU-2022:2173-1

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2172-1

OPENSUSE-SU-2022_2173-1

RHSA-2021:2570

RHSA-2021:2599

RHSA-2021:2666

RHSA-2021:2718

RHSA-2021:2719

RHSA-2021_2570

RHSA-2021_2599

RLSA-2021:2570

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2172-1

SUSE-SU-2022:2173-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2377-1

SUSE-SU-2022:2382-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2407-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4611-1

SUSE-SU-2022_2377-1

SUSE-SU-2022_2382-1

SUSE-SU-2022_2407-1

USN-5070-1

USN-5106-1

USN-5120-1

USN-5210-1

USN-5210-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 415

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073 · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/cgwalters/cve-2020-14386 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit