Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
320
VMScore

CVE-2020-27171

Published: 20/03/2021 Updated: 07/11/2023
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 6 | Impact Score: 5.2 | Exploitability Score: 0.8
VMScore: 320
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

An issue exists in the Linux kernel prior to 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

fedoraproject fedora 32

fedoraproject fedora 33

fedoraproject fedora 34

debian debian linux 9.0

canonical ubuntu linux 16.04

canonical ubuntu linux 18.04

canonical ubuntu linux 14.04

canonical ubuntu linux 20.04

Vendor Advisories

Amazon Linux 2: ALAS2-2021-1627
A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_bufferc in the Linux kernel before 539 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41 (CVE-2019-19060) A bypass was found for the Spectre v1 hardening in the eBPF engine of the Linux kernel The code in the kernel/bpf/verifier ...
Red Hat: CVE-2020-27171
A flaw was found in the Linux kernel Integer underflow when restricting speculative pointer arithmetic allows unprivileged local users to leak content of kernel memory The highest threat from this vulnerability is to data confidentiality ...
Arch Linux Issues:
A numeric error in the Linux kernel mechanism to mitigate speculatively out-of-bounds loads (Spectre mitigation) has been identified Unprivileged BPF programs running on affected 64-bit systems can exploit this to execute speculatively out-of-bounds loads from 4GB window within the kernel memory This can be abused to extract contents of kernel me ...

Mailing Lists

Full Disclosure: Re: Re: CVE-2021-20219 Linux kernel: improper synchronization in flush_to_ldisc() can lead to DoS
On Thu, Mar 18, 2021 at 08:21:36PM +0100, Solar Designer wrote: If you look at the 3 RH emails this week for issues, they all contained misinformation and confused people I did not do my usual "why are you asking for a CVE for an old issue" questions, I asked in one for more information about the issue involved, and for the other, proper acknow ...
Full Disclosure: Re: [CVE-2020-27171] Numeric error when restricting speculative pointer arithmetic allows unprivileged local users to leak content of kernel memory
Some details of how CVE-2020-27171 could be exploited in practice were provided via linux-distros mailing list with 7 days embargo This was intended to help any affected Linux distributions to assess the risk and decide about any appropriate actions As the embargo expires today, I was asked to share these details publically on oss-security The ...
Full Disclosure: [CVE-2020-27171] Numeric error when restricting speculative pointer arithmetic allows unprivileged local users to leak content of kernel memory
Numeric error in the Linux kernel mechanism to mitigate speculatively out-of-bounds loads (Spectre mitigation) has been identified Unprivileged BPF programs running on affected 64-bit systems can exploit this to execute speculatively out-of-bounds loads from 4GB window within the kernel memory This can be abused to extract contents of kernel mem ...

Github Repositories

https://github.com/toabctl/ubuntu-package-changelog

Get a Ubuntu package changelog from the command line

ubuntu-package-changelog ubuntu-package-changelog can be used to get a changelog for a given Ubuntu source package Eg: ubuntu-package-changelog focal Updates linux-azure linux-azure (540-104345) focal; urgency=medium [ Ubuntu: 540-7078 ] * CVE-2020-27170 - bpf: Fix off-by-one for area size in creating mask to left * CVE-2020-27171 - bpf: Prohibit alu ops

Recent Articles

Newly-Discovered Vulnerabilities Could Allow for Bypass of Spectre Mitigations in Linux
Symantec Threat Intelligence Blog • Threat Hunter Team • 29 Mar 2024

Bugs could allow a malicious user to access data belonging to other users.

Posted: 29 Mar, 20215 Min ReadThreat Intelligence SubscribeNewly-Discovered Vulnerabilities Could Allow for Bypass of Spectre Mitigations in LinuxBugs could allow a malicious user to access data belonging to other users.Two new vulnerabilities have been patched in the Linux kernel which, if exploited, could bypass existing mitigations for the Spectre vulnerabilities. The vulnerabilities were discovered by Piotr Krysiuk, a researcher on Symantec’s Threa...

Read more...

References

CWE-193https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/patch/?id=10d2bb2e6b1d8c4576c56a748f697dbeb8388899https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8https://www.openwall.com/lists/oss-security/2021/03/19/3http://www.openwall.com/lists/oss-security/2021/03/24/5https://lists.debian.org/debian-lts-announce/2021/03/msg00035.htmlhttp://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRTPQE73ANG7D6M4L4PK5ZQDPO4Y2FVD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FB6LUXPEIRLZH32YXWZVEZAD4ZL6SDK2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/https://nvd.nist.govhttps://github.com/toabctl/ubuntu-package-changeloghttps://alas.aws.amazon.com/AL2/ALAS-2021-1627.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380CVE-2024-1694local file inclusionCVE-2024-5645CVE-2024-24919XSSCVE-2024-36774CVE-2024-21306SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook