CVE-2020-12114MEDIUM
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.
References
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
http://packetstormsecurity.com/files/159565/Kernel-Live-Patch-Security-Notice-LSN-0072-1.html
http://www.openwall.com/lists/oss-security/2020/05/04/2
https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
https://security.netapp.com/advisory/ntap-20200608-0001/
https://usn.ubuntu.com/4387-1/
https://usn.ubuntu.com/4388-1/
https://usn.ubuntu.com/4389-1/
https://usn.ubuntu.com/4390-1/
https://usn.ubuntu.com/4391-1/
https://usn.ubuntu.com/4392-1/
Details
Source: MITRE
Published: 2020-05-04
Updated: 2020-10-14
Type: CWE-362
Risk Information
CVSS v2
Base Score: 1.9
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 3.4
Severity: LOW
CVSS v3
Base Score: 4.7
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 150135 | RHEL 8 : kernel (RHSA-2021:2185) | Nessus | Red Hat Local Security Checks | high |
| 150127 | RHEL 8 : kernel-rt (RHSA-2021:2190) | Nessus | Red Hat Local Security Checks | high |
| 149914 | Oracle Linux 8 : kernel (ELSA-2021-1578) | Nessus | Oracle Linux Local Security Checks | high |
| 149874 | CentOS 8 : kernel (CESA-2021:1578) | Nessus | CentOS Local Security Checks | high |
| 149670 | RHEL 8 : kernel (RHSA-2021:1578) | Nessus | Red Hat Local Security Checks | high |
| 149660 | RHEL 8 : kernel-rt (RHSA-2021:1739) | Nessus | Red Hat Local Security Checks | high |
| 146701 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2021-1311) | Nessus | Huawei Local Security Checks | high |
| 145201 | EulerOS 2.0 SP3 : kernel (EulerOS-SA-2021-1079) | Nessus | Huawei Local Security Checks | high |
| 140499 | Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5845) | Nessus | Oracle Linux Local Security Checks | critical |
| 140378 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2487-1) | Nessus | SuSE Local Security Checks | medium |
| 140328 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1958) | Nessus | Huawei Local Security Checks | high |
| 138679 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-801) | Nessus | SuSE Local Security Checks | medium |
| 138272 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:1663-1) | Nessus | SuSE Local Security Checks | critical |
| 137805 | EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1698) | Nessus | Huawei Local Security Checks | medium |
| 137617 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1605-1) | Nessus | SuSE Local Security Checks | medium |
| 137616 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1603-1) | Nessus | SuSE Local Security Checks | medium |
| 137615 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1602-1) | Nessus | SuSE Local Security Checks | medium |
| 137613 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:1599-1) | Nessus | SuSE Local Security Checks | medium |
| 137612 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1597-1) | Nessus | SuSE Local Security Checks | high |
| 137611 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1596-1) | Nessus | SuSE Local Security Checks | high |
| 137608 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1587-1) | Nessus | SuSE Local Security Checks | medium |
| 137341 | Debian DSA-4699-1 : linux - security update | Nessus | Debian Local Security Checks | medium |
| 137340 | Debian DSA-4698-1 : linux - security update | Nessus | Debian Local Security Checks | medium |
| 137339 | Debian DLA-2242-1 : linux-4.9 security update | Nessus | Debian Local Security Checks | medium |
| 137301 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4391-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137300 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4390-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137299 | Ubuntu 20.04 : Linux kernel vulnerabilities (USN-4389-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137298 | Ubuntu 18.04 LTS : linux-gke-5.0, linux-oem-osp1 vulnerabilities (USN-4388-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137297 | Ubuntu 18.04 LTS / 19.10 : Linux kernel vulnerabilities (USN-4387-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137283 | Debian DLA-2241-2 : linux security update | Nessus | Debian Local Security Checks | medium |
| 137024 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-1606) | Nessus | Huawei Local Security Checks | medium |
| 136870 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1592) | Nessus | Huawei Local Security Checks | high |