Back to feed
EUVD-2020-22018 · Published Dec 9, 2020
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.
Technologies
Netapp 8300 FirmwareNetapp 8300Netapp 8700 FirmwareNetapp A700SNetapp H410C FirmwareNetapp H410CNetapp A700S FirmwareNetapp 8700Netapp Solidfire Baseboard Management ControllerNetapp A400Netapp Solidfire Baseboard Management Controller FirmwareFedoraproject FedoraDebian Debian LinuxBroadcom Fabric Operating SystemLinux Linux KernelNetapp A400 FirmwareNetapp Active Iq Unified Manager
Weaknesses
CWE-667CWE-416
CVSS scores
- v3.14.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - v2.02.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation Impact
References
- http://packetstormsecurity.com/files/164950/Kernel-Live-Patch-Security-Notice-LSN-0082-1.html
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c8bcd9c5be24fb9e6132e97da5a35e55a83e36b9
- http://www.openwall.com/lists/oss-security/2020/12/10/1
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOB25SU6XUL4TNP7KB63WNZSYTIYFDPP/
Potentially impacted assets
See if this affects your attack surface
