PT-2020-5488 · Linux+8 · Linux Kernel+8

Published 2020-10-29 · Updated 2023-04-02 · CVE-2020-12364

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.7212 Linux kernel version prior to 5.5

Description A null pointer reference in some Intel Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access. This issue can be exploited by a user with local access, potentially leading to a denial of service.

Recommendations For Intel Graphics Drivers versions prior to 26.20.100.7212, update to version 26.20.100.7212 or later. For Linux kernel versions prior to 5.5, update to version 5.5 or later. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2021:1578

BDU:2021-00823

CESA-2021_1578

CESA-2021_1620

CESA-2021_1739

CESA-2021_2314

CVE-2020-12364

DLA-3380-1

OPENSUSE-SU-2021:0393-1

OPENSUSE-SU-2021:0407-1

OPENSUSE-SU-2021_0393-1

OPENSUSE-SU-2021_0407-1

RHSA-2021:1578

RHSA-2021:1620

RHSA-2021:1739

RHSA-2021:2314

RHSA-2021:2316

RHSA-2021_1578

RHSA-2021_1620

RHSA-2021_1739

RHSA-2021_2314

RHSA-2021_2316

RLSA-2021:1620

SUSE-SU-2021:0694-1

SUSE-SU-2021:0735-1

SUSE-SU-2021:0738-1

SUSE-SU-2021:0741-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Intel Graphics Drivers

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 196

• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• https://errata.rockylinux.org/RLSA-2021:1620 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12364 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0407-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00823 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:0738-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3380-1 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:1620 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1578 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0694-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2314.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12364 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-12364 · Security Note