Published: 29/01/2020 Updated: 10/06/2020

CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8

VMScore: 320

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

fs/namei.c in the Linux kernel prior to 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several security issues were fixed in the Linux kernel ...

The system could be made to crash or expose sensitive information ...

Several security issues were fixed in the Linux kernel ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak CVE-2020-2732 Paulo Bonzini discovered that the KVM implementation for Intel processors did not properly handle instruction emulation for L2 guests when nested virtualization is enabled This ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2019-2182 Hanjun Guo and Lei Li reported a race condition in the arm64 virtual memory management code, which could lead to an information disclosure, denial of service (crash), or possibl ...

oss-sec mailing list archives   By Date By Thread </form>    Re: Linux kernel: user-triggerable read-after-free crash or 1-bit infoleak oracle in open(2)  <!--X ...

CWE-416 https://github.com/torvalds/linux/commit/d0cb50185ae942b03c4327be322055d622dc79f6 https://www.openwall.com/lists/oss-security/2020/01/28/2 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0cb50185ae942b03c4327be322055d622dc79f6 http://www.openwall.com/lists/oss-security/2020/01/28/4 http://www.openwall.com/lists/oss-security/2020/02/02/1 https://security.netapp.com/advisory/ntap-20200313-0003/http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html https://usn.ubuntu.com/4320-1/https://usn.ubuntu.com/4318-1/http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html https://usn.ubuntu.com/4324-1/https://usn.ubuntu.com/4325-1/https://usn.ubuntu.com/4319-1/https://www.debian.org/security/2020/dsa-4667 https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html https://www.debian.org/security/2020/dsa-4698 https://nvd.nist.gov https://usn.ubuntu.com/4324-1/

CVE-2020-8428

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect