PT-2020-7007 · Linux+5 · Linux Kernel+5

Bodong Zhao + 1 · Published 2020-11-10 · Updated 2022-10-19 · CVE-2020-28941

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.9.9

Description An issue in the Linux kernel's speakup driver allows local attackers to cause a denial of service attack. This occurs due to an invalid free when the line discipline is used more than once. The issue is related to the spk ttyio.c component.

Recommendations For Linux kernel versions through 5.9.9, consider disabling the speakup driver to prevent exploitation until a patch is available. Restrict access to the spk ttyio.c component to minimize the risk of a local denial of service attack.

Fix

DoS

Weakness Enumeration

CWE-763

Related Identifiers

ALT-PU-2020-3439

ALT-PU-2020-3536

ALT-PU-2020-3553

ALT-PU-2020-3570

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2025-00837

CVE-2020-28941

DLA-2483-1

MGASA-2021-0030

MGASA-2021-0031

OPENSUSE-SU-2020:2161-1

OPENSUSE-SU-2020:2260-1

OPENSUSE-SU-2020_2161-1

OPENSUSE-SU-2020_2260-1

OPENSUSE-SU-2021:0242-1

OPENSUSE-SU-2021_0242-1

SUSE-SU-2020:3713-1

SUSE-SU-2020:3748-1

SUSE-SU-2020:3764-1

USN-4749-1

USN-4750-1

USN-4751-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 918

• https://github.com/torvalds/linux/commit/d4122754442799187d5d537a9c039a49a67e57f1 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2021:0242-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-29660 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25704 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:2161-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-29661 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4749-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-29569 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-28941 · Security Note
• https://ubuntu.com/security/CVE-2020-25669 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27777 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28941 · Security Note
• https://ubuntu.com/security/CVE-2020-28588 · Vendor Advisory