CVE-2020-29374

LOW EPSS 31.7%
Published Nov 28, 20205y ago · Modified Jun 17, 20262w ago
3.6 CVSS 3.1
Low
Find Similar
Published Nov 28, 2020 5y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

CVSS Details

Base Score
3.6
Exploitability
1.0
Impact
2.5
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
31.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-362
CWE-863 Incorrect Authorization Authorization

Affected Products 12

VendorProductVersionRange
linuxlinux_kernel* <5.7.3
debiandebian_linux9.0any
debiandebian_linux10.0any
netapp500f_firmware*any
netapp500f*any
netappa250_firmware*any
netappa250*any
netapph410c_firmware*any
netapph410c*any
netappsolidfire_\&_hci_management_node*any
netappsolidfire_\&_hci_storage_node*any
netapphci_compute_node_bios*any

References 9

  • packetstormsecurity.com http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html
    ExploitThird Party AdvisoryVDB Entry
  • bugs.chromium.org https://bugs.chromium.org/p/project-zero/issues/detail?id=2045
    ExploitIssue TrackingThird Party Advisory
  • cdn.kernel.org https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
    Release NotesThird Party AdvisoryVendor Advisory
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=17839856fd588f4ab6b789f482ed3ffd7c403e1f
    PatchVendor Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
    Mailing ListThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
    Mailing ListThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
    Mailing ListThird Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20210115-0002/
    Third Party Advisory
  • debian.org https://www.debian.org/security/2022/dsa-5096
    Third Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=17839856fd588f4ab6b789f482ed3ffd7c403e1f
    PatchVendor Advisory