CVE-2020-11565LOW
Description
** DISPUTED ** An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”.
References
https://github.com/torvalds/linux/commit/aa9f7d5172fac9bf1f09e678c35e287a40a7b7dd
https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
https://usn.ubuntu.com/4363-1/
https://usn.ubuntu.com/4364-1/
https://usn.ubuntu.com/4367-1/
https://usn.ubuntu.com/4368-1/
https://usn.ubuntu.com/4369-1/
Details
Source: MITRE
Published: 2020-04-06
Updated: 2020-06-10
Type: CWE-787
Risk Information
CVSS v2.0
Base Score: 3.6
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Impact Score: 4.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3.0
Base Score: 6
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Impact Score: 5.2
Exploitability Score: 0.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 5.6.2 (inclusive)
Configuration 2
OR
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 147318 | NewStart CGSL MAIN 6.02 : kernel Multiple Vulnerabilities (NS-SA-2021-0078) | Nessus | NewStart CGSL Local Security Checks | high |
| 145806 | CentOS 8 : kernel (CESA-2020:4431) | Nessus | CentOS Local Security Checks | high |
| 143086 | RHEL 7 : kernel-alt (RHSA-2020:2854) | Nessus | Red Hat Local Security Checks | high |
| 142430 | RHEL 8 : kernel (RHSA-2020:4431) | Nessus | Red Hat Local Security Checks | high |
| 142382 | RHEL 8 : kernel-rt (RHSA-2020:4609) | Nessus | Red Hat Local Security Checks | high |
| 141727 | Scientific Linux Security Update : kernel on SL7.x x86_64 (20201001) | Nessus | Scientific Linux Local Security Checks | high |
| 141619 | CentOS 7 : kernel (CESA-2020:4060) | Nessus | CentOS Local Security Checks | high |
| 141057 | RHEL 7 : kernel (RHSA-2020:4060) | Nessus | Red Hat Local Security Checks | high |
| 141026 | RHEL 7 : kernel-rt (RHSA-2020:4062) | Nessus | Red Hat Local Security Checks | high |
| 140917 | EulerOS 2.0 SP3 : kernel (EulerOS-SA-2020-2150) | Nessus | Huawei Local Security Checks | high |
| 137932 | EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2020-1713) | Nessus | Huawei Local Security Checks | high |
| 137805 | EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1698) | Nessus | Huawei Local Security Checks | high |
| 137516 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674) | Nessus | Huawei Local Security Checks | critical |
| 137391 | Slackware 14.2 : Slackware 14.2 kernel (SSA:2020-163-01) | Nessus | Slackware Local Security Checks | high |
| 137340 | Debian DSA-4698-1 : linux - security update | Nessus | Debian Local Security Checks | high |
| 137339 | Debian DLA-2242-1 : linux-4.9 security update | Nessus | Debian Local Security Checks | high |
| 137283 | Debian DLA-2241-2 : linux security update | Nessus | Debian Local Security Checks | high |
| 137024 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-1606) | Nessus | Huawei Local Security Checks | high |
| 136966 | Ubuntu 18.04 LTS / 19.10 : Linux kernel regression (USN-4369-2) | Nessus | Ubuntu Local Security Checks | medium |
| 136965 | Ubuntu 20.04 : Linux kernel regression (USN-4367-2) | Nessus | Ubuntu Local Security Checks | medium |
| 136804 | Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2020-037) | Nessus | Virtuozzo Local Security Checks | high |
| 136759 | Ubuntu 18.04 LTS / 19.10 : Linux kernel vulnerabilities (USN-4369-1) | Nessus | Ubuntu Local Security Checks | medium |
| 136733 | Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4368-1) | Nessus | Ubuntu Local Security Checks | medium |
| 136732 | Ubuntu 20.04 : Linux kernel vulnerabilities (USN-4367-1) | Nessus | Ubuntu Local Security Checks | medium |
| 136711 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4364-1) | Nessus | Ubuntu Local Security Checks | medium |
| 136710 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4363-1) | Nessus | Ubuntu Local Security Checks | medium |
| 136239 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1536) | Nessus | Huawei Local Security Checks | critical |
| 136124 | Debian DSA-4667-1 : linux - security update | Nessus | Debian Local Security Checks | medium |
| 136107 | Photon OS 1.0: Linux PHSA-2020-1.0-0290 | Nessus | PhotonOS Local Security Checks | medium |
| 135877 | Photon OS 2.0: Linux PHSA-2020-2.0-0230 | Nessus | PhotonOS Local Security Checks | medium |
| 135871 | Photon OS 3.0: Linux PHSA-2020-3.0-0082 | Nessus | PhotonOS Local Security Checks | medium |
| 135741 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1508) | Nessus | Huawei Local Security Checks | high |