PT-2021-6103 · Linux+9 · Linux Kernel+9

Published 2020-11-03 · Updated 2024-01-30 · CVE-2020-27820

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the postclose() handler of the Linux kernel's nouveau driver. This vulnerability can occur when a device is removed, which can happen physically without powering off or by unbinding the driver. The exploitation of this issue may allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-3375

ALT-PU-2021-3376

ALT-PU-2021-3380

ALT-PU-2021-3415

ALT-PU-2021-3469

ALT-PU-2021-3485

ALT-PU-2022-1014

BDU:2022-00828

CESA-2022_1975

CESA-2022_1988

CVE-2020-27820

MGASA-2021-0538

MGASA-2021-0539

OPENSUSE-SU-2022:0056-1

OPENSUSE-SU-2022:0131-1

OPENSUSE-SU-2022:0366-1

OPENSUSE-SU-2022_0056-1

OPENSUSE-SU-2022_0131-1

OPENSUSE-SU-2022_0366-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3978-1

SUSE-SU-2021_3978-1

SUSE-SU-2022:0056-1

SUSE-SU-2022:0068-1

SUSE-SU-2022:0079-1

SUSE-SU-2022:0080-1

SUSE-SU-2022:0090-1

SUSE-SU-2022:0131-1

SUSE-SU-2022:0197-1

SUSE-SU-2022:0366-1

SUSE-SU-2022:0367-1

SUSE-SU-2022:0371-1

SUSE-SU-2022:14905-1

SUSE-SU-2022_14905-1

USN-5265-1

USN-5278-1

USN-5413-1

USN-5415-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 426

• 🔥 https://lore.kernel.org/dri-devel/[e-mail] · Exploit
• https://ubuntu.com/security/CVE-2021-45480 · Vendor Advisory
• https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4157 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27820 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26401 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20008 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0131-1 · Vendor Advisory
• https://lore.kernel.org/dri-devel/20201103194912.184413-4-jcline%40redhat.com · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory