PT-2020-6165 · Linux+6 · Linux Kernel+6
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.9-rc4
Description
A flaw in the Linux kernel allows memory corruption to be exploited, potentially granting root privileges to unprivileged processes. This poses a significant threat to data confidentiality and integrity. The vulnerability is related to the AF PACKET socket implementation and can be exploited by a local unprivileged user to execute code with root privileges or escape from isolated containers if root access is available.
Recommendations
For Linux kernel versions prior to 5.9-rc4, update to a version 5.9-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the AF PACKET socket implementation to minimize the risk of exploitation.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu