Vulnerability Details CVE-2020-25221
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://www.openwall.com/lists/oss-security/2020/09/10/4
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7
- https://git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73a
- https://git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2
- https://security.netapp.com/advisory/ntap-20201001-0003/
- https://www.openwall.com/lists/oss-security/2020/09/08/4
- http://www.openwall.com/lists/oss-security/2020/09/10/4
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7
- https://git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73a
- https://git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2
- https://security.netapp.com/advisory/ntap-20201001-0003/
- https://www.openwall.com/lists/oss-security/2020/09/08/4
Products affected by CVE-2020-25221
-
_enterprise_sds_&_hci_storage_node:-
-
cpe:2.3:a:netapp:cloud_backup:-
-
cpe:2.3:a:netapp:solidfire
-
cpe:2.3:a:netapp:solidfire_&_hci_management_node:-
-
cpe:2.3:h:netapp:hci_compute_node:-
-
cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-
-
cpe:2.3:o:linux:linux_kernel:5.7.0
-
cpe:2.3:o:linux:linux_kernel:5.7.1
-
cpe:2.3:o:linux:linux_kernel:5.7.10
-
cpe:2.3:o:linux:linux_kernel:5.7.11
-
cpe:2.3:o:linux:linux_kernel:5.7.12
-
cpe:2.3:o:linux:linux_kernel:5.7.13
-
cpe:2.3:o:linux:linux_kernel:5.7.14
-
cpe:2.3:o:linux:linux_kernel:5.7.15
-
cpe:2.3:o:linux:linux_kernel:5.7.16
-
cpe:2.3:o:linux:linux_kernel:5.7.17
-
cpe:2.3:o:linux:linux_kernel:5.7.18
-
cpe:2.3:o:linux:linux_kernel:5.7.19
-
cpe:2.3:o:linux:linux_kernel:5.7.2
-
cpe:2.3:o:linux:linux_kernel:5.7.3
-
cpe:2.3:o:linux:linux_kernel:5.7.4
-
cpe:2.3:o:linux:linux_kernel:5.7.5
-
cpe:2.3:o:linux:linux_kernel:5.7.6
-
cpe:2.3:o:linux:linux_kernel:5.7.7
-
cpe:2.3:o:linux:linux_kernel:5.7.8
-
cpe:2.3:o:linux:linux_kernel:5.7.9
-
cpe:2.3:o:linux:linux_kernel:5.8
-
cpe:2.3:o:linux:linux_kernel:5.8.0
-
cpe:2.3:o:linux:linux_kernel:5.8.1
-
cpe:2.3:o:linux:linux_kernel:5.8.2
-
cpe:2.3:o:linux:linux_kernel:5.8.3
-
cpe:2.3:o:linux:linux_kernel:5.8.4
-
cpe:2.3:o:linux:linux_kernel:5.8.5
-
cpe:2.3:o:linux:linux_kernel:5.8.6