CVE-2020-12659

EUVD-2020-4958
An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.18 ≤
𝑥
< 4.19.118
linuxlinux_kernel
4.20 ≤
𝑥
< 5.4.35
linuxlinux_kernel
5.5 ≤
𝑥
< 5.6.7
netappactive_iq_unified_manager
-
netappcloud_backup
-
netappsolidfire_\&_hci_management_node
-
netappsteelstore_cloud_integrated_storage
-
netappsolidfire_baseboard_management_controller
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
jessie
not-affected
sid
6.11.6-1
fixed
stretch
not-affected
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
bionic
not-affected
eoan
Fixed 5.3.0-59.53
released
focal
Fixed 5.4.0-37.41
released
trusty
not-affected
xenial
not-affected
linux-aws
bionic
not-affected
eoan
Fixed 5.3.0-1023.25
released
focal
Fixed 5.4.0-1015.15
released
trusty
not-affected
xenial
not-affected
linux-aws-5.0
bionic
ignored
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-aws-5.3
bionic
Fixed 5.3.0-1023.25~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-aws-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
linux-azure
bionic
ignored
eoan
Fixed 5.3.0-1028.29
released
focal
Fixed 5.4.0-1016.16
released
trusty
not-affected
xenial
not-affected
linux-azure-4.15
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-azure-5.3
bionic
Fixed 5.3.0-1028.29~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-azure-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-azure-edge
bionic
ignored
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp
bionic
ignored
eoan
Fixed 5.3.0-1026.28
released
focal
Fixed 5.4.0-1015.15
released
trusty
dne
xenial
not-affected
linux-gcp-4.15
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp-5.3
bionic
Fixed 5.3.0-1026.28~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-gcp-edge
bionic
ignored
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-4.15
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-5.0
bionic
Fixed 5.0.0-1042.43
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-5.3
bionic
Fixed 5.3.0-1026.28~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-hwe
bionic
Fixed 5.3.0-59.53~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
linux-hwe-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-hwe-edge
bionic
ignored
eoan
dne
focal
dne
trusty
dne
xenial
ignored
linux-kvm
bionic
not-affected
eoan
Fixed 5.3.0-1023.25
released
focal
Fixed 5.4.0-1015.15
released
trusty
dne
xenial
not-affected
linux-lts-trusty
bionic
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-lts-xenial
bionic
dne
eoan
dne
focal
dne
trusty
not-affected
xenial
dne
linux-oem
bionic
not-affected
eoan
not-affected
focal
dne
trusty
dne
xenial
ignored
linux-oem-5.6
bionic
dne
eoan
dne
focal
Fixed 5.6.0-1010.10
released
trusty
dne
xenial
dne
linux-oem-osp1
bionic
Fixed 5.0.0-1059.64
released
eoan
ignored
focal
dne
trusty
dne
xenial
dne
linux-oracle
bionic
not-affected
eoan
Fixed 5.3.0-1024.26
released
focal
Fixed 5.4.0-1015.15
released
trusty
dne
xenial
not-affected
linux-oracle-5.0
bionic
ignored
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-oracle-5.3
bionic
Fixed 5.3.0-1024.26~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-oracle-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-raspi
bionic
dne
eoan
dne
focal
Fixed 5.4.0-1012.12
released
trusty
dne
xenial
dne
linux-raspi-5.4
bionic
not-affected
focal
dne
trusty
dne
xenial
dne
linux-raspi2
bionic
not-affected
eoan
Fixed 5.3.0-1027.29
released
focal
ignored
trusty
dne
xenial
not-affected
linux-raspi2-5.3
bionic
Fixed 5.3.0-1027.29~18.04.1
released
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
eoan
dne
focal
Fixed 5.4.0-27.31
released
trusty
dne
xenial
dne
linux-snapdragon
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
https://bugzilla.kernel.org/show_bug.cgi?id=207225
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02
https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02
https://security.netapp.com/advisory/ntap-20200608-0001/
https://usn.ubuntu.com/4387-1/
https://usn.ubuntu.com/4388-1/
https://usn.ubuntu.com/4389-1/
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
https://bugzilla.kernel.org/show_bug.cgi?id=207225
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02
https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02
https://security.netapp.com/advisory/ntap-20200608-0001/
https://usn.ubuntu.com/4387-1/
https://usn.ubuntu.com/4388-1/
https://usn.ubuntu.com/4389-1/