PT-2020-6161 · Linux+3 · Linux Kernel+3

Nopnop Nop · Published 2020-09-14 · Updated 2022-04-06 · CVE-2020-28097

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.10

Description The vgacon subsystem in the Linux kernel mishandles software scrollback, leading to a vgacon scrolldelta out-of-bounds read. This issue may allow an attacker to impact the availability of protected information.

Recommendations For Linux kernel versions prior to 5.8.10, update to version 5.8.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the vgacon subsystem until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2020-2864

ALT-PU-2020-2888

ALT-PU-2020-3210

ALT-PU-2020-3553

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2021-03291

CVE-2020-28097

OESA-2021-1279

OPENSUSE-SU-2022:0363-1

OPENSUSE-SU-2022:0370-1

OPENSUSE-SU-2022_0363-1

OPENSUSE-SU-2022_0370-1

SUSE-SU-2022:0363-1

SUSE-SU-2022:0364-1

SUSE-SU-2022:0370-1

SUSE-SU-2022:0372-1

SUSE-SU-2022:0543-1

SUSE-SU-2022:0555-1

SUSE-SU-2022_0363-1

SUSE-SU-2022_0364-1

SUSE-SU-2022_0370-1

SUSE-SU-2022_0372-1

SUSE-SU-2022_0543-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

References · 146

• 🔥 https://seclists.org/oss-sec/2020/q3/176 · Exploit
• https://github.com/torvalds/linux/commit/973c096f6a85e5b5f2a295126ba6928d9a6afd45 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-35039 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-3573 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22555 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0129 · Security Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1279 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-28097 · Security Note
• https://ubuntu.com/security/CVE-2020-28097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3600 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:0372-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0370-1 · Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=973c096f6a85e5b5f2a295126ba6928d9a6afd45 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0555-1 · Vendor Advisory