Published: 05/05/2020 Updated: 01/02/2024

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

An issue exists in the Linux kernel prior to 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
netapp cloud backup -
netapp steelstore cloud integrated storage -
netapp solidfire \\& hci management node -
netapp active iq unified manager -
netapp solidfire baseboard management controller -
netapp hci baseboard management controller h300s
netapp hci baseboard management controller h500s
netapp hci baseboard management controller h700s
netapp hci baseboard management controller h410s
netapp hci baseboard management controller h410c
netapp hci baseboard management controller h610c
netapp hci baseboard management controller h610s
netapp hci baseboard management controller h615c
netapp aff baseboard management controller a700s

Synopsis Moderate: kernel-rt security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS ...

Synopsis Moderate: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Syst ...

Several security issues were fixed in the Linux kernel ...

CWE-787 https://bugzilla.kernel.org/show_bug.cgi?id=207225 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02 https://security.netapp.com/advisory/ntap-20200608-0001/http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html https://usn.ubuntu.com/4388-1/https://usn.ubuntu.com/4389-1/https://usn.ubuntu.com/4387-1/https://access.redhat.com/errata/RHSA-2020:4609 https://nvd.nist.gov https://usn.ubuntu.com/4389-1/

CVE-2020-12659

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect