CVE-2020-10766LOW
Description
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.
References
Details
Source: MITRE
Published: 2020-09-15
Updated: 2020-09-23
Type: NVD-CWE-noinfo
Risk Information
CVSS v2.0
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3.0
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 147512 | EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-1604) | Nessus | Huawei Local Security Checks | high |
| 146282 | openSUSE Security Update : RT kernel (openSUSE-2021-242) | Nessus | SuSE Local Security Checks | high |
| 140378 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2487-1) | Nessus | SuSE Local Security Checks | high |
| 140328 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1958) | Nessus | Huawei Local Security Checks | high |
| 140183 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4485-1) | Nessus | Ubuntu Local Security Checks | high |
| 140181 | Ubuntu 18.04 LTS / 20.04 : Linux kernel vulnerabilities (USN-4483-1) | Nessus | Ubuntu Local Security Checks | high |
| 139995 | EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1892) | Nessus | Huawei Local Security Checks | high |
| 139551 | Debian DLA-2323-1 : linux-4.19 new package | Nessus | Debian Local Security Checks | high |
| 139401 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-1153) | Nessus | SuSE Local Security Checks | high |
| 139364 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2134-1) | Nessus | SuSE Local Security Checks | high |
| 139362 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2121-1) | Nessus | SuSE Local Security Checks | high |
| 139310 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2107-1) | Nessus | SuSE Local Security Checks | high |
| 139309 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2106-1) | Nessus | SuSE Local Security Checks | high |
| 139308 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2105-1) | Nessus | SuSE Local Security Checks | high |
| 139187 | RHEL 8 : kernel (RHSA-2020:3222) | Nessus | Red Hat Local Security Checks | high |
| 139137 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1807) | Nessus | Huawei Local Security Checks | high |
| 139028 | Ubuntu 18.04 LTS : linux kernel vulnerabilities (USN-4440-1) | Nessus | Ubuntu Local Security Checks | high |
| 139027 | Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4439-1) | Nessus | Ubuntu Local Security Checks | high |
| 138854 | Amazon Linux 2 : kernel (ALAS-2020-1465) | Nessus | Amazon Linux Local Security Checks | high |
| 138836 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4427-1) | Nessus | Ubuntu Local Security Checks | high |
| 138807 | RHEL 8 : kernel-rt (RHSA-2020:3016) | Nessus | Red Hat Local Security Checks | high |
| 138805 | RHEL 8 : kernel (RHSA-2020:3010) | Nessus | Red Hat Local Security Checks | high |
| 138798 | RHEL 8 : kernel (RHSA-2020:3041) | Nessus | Red Hat Local Security Checks | medium |
| 138727 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-935) | Nessus | SuSE Local Security Checks | high |
| 138643 | Amazon Linux AMI : kernel (ALAS-2020-1401) | Nessus | Amazon Linux Local Security Checks | high |
| 138288 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1713-1) | Nessus | SuSE Local Security Checks | low |
| 138284 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1699-1) | Nessus | SuSE Local Security Checks | high |
| 138283 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1693-1) | Nessus | SuSE Local Security Checks | high |
| 138190 | Photon OS 2.0: Linux PHSA-2020-2.0-0256 | Nessus | PhotonOS Local Security Checks | high |
| 138181 | Photon OS 3.0: Linux PHSA-2020-3.0-0108 | Nessus | PhotonOS Local Security Checks | high |
| 137732 | Fedora 31 : kernel (2020-1b2dae6219) | Nessus | Fedora Local Security Checks | low |
| 137677 | Fedora 32 : kernel (2020-125ccdc871) | Nessus | Fedora Local Security Checks | low |