PT-2020-6552 · Linux+6 · Linux Kernel+6

Fan Yang · Published 2019-08-14 · Updated 2024-01-19 · CVE-2020-10757

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel versions after 4.5-rc1

Description A flaw was found in the Linux Kernel in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system. The issue is related to the mm/mremap.c component and involves a buffer data boundary overflow.

Recommendations For Linux Kernel versions after 4.5-rc1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Type Confusion

Buffer Overflow

Weakness Enumeration

CWE-843

CWE-119

Related Identifiers

ALT-PU-2020-2098

ALT-PU-2020-2130

ALT-PU-2020-2145

ALT-PU-2020-2146

ALT-PU-2020-2156

ALT-PU-2020-2164

ALT-PU-2020-2209

ALT-PU-2020-2234

ALT-PU-2020-2240

ALT-PU-2020-2409

ALT-PU-2020-2432

ALT-PU-2020-2687

ALT-PU-2020-3057

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1745

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2021-06410

BDU:2021-06411

CESA-2020_3010

CESA-2020_3016

CESA-2020_3220

CVE-2020-10757

DLA-2242-1

DSA-4698-1

DSA-4699-1

LSN-0069-1

MGASA-2020-0333

OPENSUSE-SU-2020:0801-1

OPENSUSE-SU-2020_0801-1

OPENSUSE-SU-2021:0242-1

OPENSUSE-SU-2021_0242-1

RHSA-2020:3010

RHSA-2020:3016

RHSA-2020:3041

RHSA-2020:3220

RHSA-2020:3221

RHSA-2020:3222

RHSA-2020:3226

RHSA-2020:3598

RHSA-2020_3010

RHSA-2020_3016

RHSA-2020_3220

RHSA-2020_3221

SUSE-SU-2020:1587-1

SUSE-SU-2020:1596-1

SUSE-SU-2020:1597-1

SUSE-SU-2020:1599-1

SUSE-SU-2020:1602-1

SUSE-SU-2020:1603-1

SUSE-SU-2020:1604-1

SUSE-SU-2020:1605-1

SUSE-SU-2020:1646-1

SUSE-SU-2020:1656-1

SUSE-SU-2020:1663-1

SUSE-SU-2020:1671-1

SUSE-SU-2020:1754-1

SUSE-SU-2020:1758-1

SUSE-SU-2020:1764-1

SUSE-SU-2020:1767-1

SUSE-SU-2020:1775-1

SUSE-SU-2020:1779-1

SUSE-SU-2020:1781-1

SUSE-SU-2020:1784-1

SUSE-SU-2020:2156-1

SUSE-SU-2020:2478-1

SUSE-SU-2020:2487-1

SUSE-SU-2020:2508-1

SUSE-SU-2020_1587-1

SUSE-SU-2020_1596-1

SUSE-SU-2020_1597-1

SUSE-SU-2020_1599-1

SUSE-SU-2020_1602-1

SUSE-SU-2020_1603-1

SUSE-SU-2020_1604-1

SUSE-SU-2020_1605-1

SUSE-SU-2020_1646-1

SUSE-SU-2020_1656-1

SUSE-SU-2020_1663-1

SUSE-SU-2020_1671-1

SUSE-SU-2020_1764-1

SUSE-SU-2020_1779-1

SUSE-SU-2020_1781-1

USN-4426-1

USN-4439-1

USN-4440-1

USN-4483-1

Affected Products

Alt Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 1398

• 🔥 https://openwall.com/lists/oss-security/2020/06/04/4 · Exploit
• https://debian.org/security/2020/dsa-4699 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1587-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af5700f9 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1599-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12656 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4698-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2508-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15393 · Vendor Advisory
• https://debian.org/security/2020/dsa-4698 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1646-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12380 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13974 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4439-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2156-1 · Vendor Advisory