RedhatCVELIST:CVE-2020-10757CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.
CNA Affected
[
{
"product": "Kernel",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions after 4.5-rc1."
}
]
}
]References
lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
bugzilla.redhat.com/show_bug.cgi?id=1842525
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af5700f9
lists.debian.org/debian-lts-announce/2020/06/msg00012.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEM47BXZJLODRH5YNNZSAQ2NVM63MYMC/
security.netapp.com/advisory/ntap-20200702-0004/
usn.ubuntu.com/4426-1/
usn.ubuntu.com/4439-1/
usn.ubuntu.com/4440-1/
usn.ubuntu.com/4483-1/
www.debian.org/security/2020/dsa-4698
www.debian.org/security/2020/dsa-4699
www.openwall.com/lists/oss-security/2020/06/04/4
Related
