CVE-2020-29374 — פרטי פגיעות

תיאור (מקור, אנגלית)

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

מדדים

CVSS 3.1: 3.6 (LOW) מקור הציון: NVD CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS — סבירות ניצול: 0% (אחוזון 000) נכון ל-18/10/2026
CWE: CWE-362, CWE-863

מוצרים מושפעים

linux: linux kernel; debian: debian linux; netapp: 500f firmware; netapp: 500f; netapp: a250 firmware; netapp: a250; netapp: h410c firmware; netapp: h410c; netapp: solidfire \& hci management node; netapp: solidfire \& hci storage node; netapp: hci compute node bios

קישורים

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3 Release NotesThird Party AdvisoryVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=‮… PatchVendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3 Release NotesThird Party AdvisoryVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=‮… PatchVendor Advisory
http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-‮… ExploitThird Party AdvisoryVDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=2045 ExploitIssue TrackingThird Party Advisory
http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-‮… ExploitThird Party AdvisoryVDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=2045 ExploitIssue TrackingThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing ListThird Party Advisory

תיאור (מקור, אנגלית)

מדדים

מוצרים מושפעים

קישורים

נגישות