5.9
CVSSv3

CVE-2020-10711

Published: 22/05/2020 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions prior to 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

redhat enterprise linux 7.0

redhat enterprise linux 6.0

redhat virtualization host 4.0

redhat enterprise linux server tus 7.4

redhat enterprise linux aus 7.4

redhat enterprise linux 8.0

redhat messaging realtime grid 2.0

redhat 3scale 2.0

redhat openstack 13

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

opensuse leap 15.1

opensuse leap 15.2

canonical ubuntu linux 18.04

canonical ubuntu linux 14.04

canonical ubuntu linux 19.10

canonical ubuntu linux 20.04

canonical ubuntu linux 16.04

Vendor Advisories

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2019-2182 Hanjun Guo and Lei Li reported a race condition in the arm64 virtual memory management code, which could lead to an information disclosure, denial of service (crash), or possibl ...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2019-3016 It was discovered that the KVM implementation for x86 did not always perform TLB flushes when needed, if the paravirtualised TLB flush feature was enabled This could lead to di ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 72 Advanced Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 76 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 76 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...
Synopsis Important: kernel-alt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 74 Advanced Update Support, Red Hat Enterprise Linux 74 Telco Extended Update Support, and Red Hat Enterprise Linux 74 Update Services for SAP Sol ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...
Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Comm ...
Synopsis Important: kernel security update Type / Sévérité Security Advisory: Important Sujet An update for kernel is now available for Red Hat Enterprise Linux 73 Advanced Update Support, Red Hat Enterprise Linux 73 Telco Extended Update Support, and Red Hat Enterprise Linux 73 Update Services for SA ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 77 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Common V ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 57 This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_ ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, ...

Mailing Lists

Hello, This issue was introduced by upstream commit: -> gitkernelorg/linus/4b8feff251da3d7058b5779e21b33a85c686b974 netlabel: fix the horribly broken catmap functions * This issue was reported by Matthew Sheets (CC'd) * Please see a proposed fix patch attached herein Thank you -- Prasad J Pandit / Red Hat Product Securi ...
+-- On Tue, 12 May 2020, P J P wrote --+ | NULL pointer dereference(s) issue(s) was found in the Linux kernel's SELinux | subsystem It occurs while importing the Commercial IP Security Option | (CIPSO) protocol's category bitmap into SELinux's extensible bitmap via | 'ebitmap_netlbl_import' routine While parsing the CIPSO restricted bitmap | ...
On Fri, 2020-05-15 at 11:27 +0530, P J P wrote: Thanks Prasad! I was reaching out the security list to check if the patches were correct from a security verification view point I will get feedback from netdev as well in a while Balbir Singh ...
I've spent some time writing a kunit test case for CVE-2020-10711 using the KUNIT framework I am attaching the patch below for reference The patch is against the latest linux-next The details are in the test case, there are some TODOs: 1 Add test cases for the ipv6 variant 2 Add a test case for cipso_v4_parsetag_rpm variant Please feel to su ...
Hello Balbir, +-- On Fri, 15 May 2020, Singh, Balbir wrote --+ | I've spent some time writing a kunit test case for CVE-2020-10711 using the | KUNIT framework I am attaching the patch below for reference The patch is | against the latest linux-next The details are in the test case, there | are some TODOs: | | 1 Add test cases for the ipv6 var ...