PT-2020-5490 · Linux+7 · Linux Kernel+7

Published 2020-10-29 · Updated 2026-03-14 · CVE-2020-12362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers for Windows versions prior to 26.20.100.7212 Linux kernel versions prior to 5.5

Description The issue is caused by an integer overflow in the firmware for some Intel Graphics Drivers, which may allow a privileged user to potentially enable an escalation of privilege via local access. This could permit an attacker to elevate their privileges.

Recommendations For Intel Graphics Drivers for Windows versions prior to 26.20.100.7212, update to version 26.20.100.7212 or later. For Linux kernel versions prior to 5.5, update to version 5.5 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2021:1578

BDU:2021-00871

CESA-2021_1578

CESA-2021_1620

CESA-2021_1739

CESA-2021_2314

CVE-2020-12362

DLA-3380-1

OPENSUSE-SU-2021:0393-1

OPENSUSE-SU-2021:0407-1

OPENSUSE-SU-2021_0393-1

OPENSUSE-SU-2021_0407-1

RHSA-2021:1578

RHSA-2021:1620

RHSA-2021:1739

RHSA-2021:2106

RHSA-2021:2164

RHSA-2021:2185

RHSA-2021:2190

RHSA-2021:2293

RHSA-2021:2314

RHSA-2021:2316

RHSA-2021:2355

RHSA-2021:2523

RHSA-2021:2735

RHSA-2021_1578

RHSA-2021_1620

RHSA-2021_1739

RHSA-2021_2314

RHSA-2021_2316

RHSA-2021_2735

RLSA-2021:1620

SUSE-SU-2021:0694-1

SUSE-SU-2021:0735-1

SUSE-SU-2021:0738-1

SUSE-SU-2021:0741-1

SUSE-SU-2021_0694-1

SUSE-SU-2021_0735-1

SUSE-SU-2021_0738-1

SUSE-SU-2021_0741-1

Affected Products

Almalinux

Centos

Debian

Intel Graphics Drivers

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 200

• https://errata.rockylinux.org/RLSA-2021:1620 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0407-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0738-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12362 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3380-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12362 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:1620 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1578 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12362 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0694-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2314.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-1578.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0735-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12362 · Vendor Advisory