Lucene search
MitreCVELIST:CVE-2020-15852HistoryJul 20, 2020 - 6:54 p.m.
CVE-2020-15852
2020-07-2018:54:52
mitre
www.cve.org
7
linux kernel
unauthorized access
i/o port permissions
xen
synchronization error
cve-2020-15852
An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of synchronization between the I/O bitmaps of TSS and Xen, aka CID-cadfad870154.
References
www.openwall.com/lists/oss-security/2020/07/21/2
xenbits.xen.org/xsa/advisory-329.html
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cadfad870154e14f745ec845708bc17d166065f2
github.com/torvalds/linux/commit/cadfad870154e14f745ec845708bc17d166065f2
security.netapp.com/advisory/ntap-20200810-0001/
Related
osv
osv
CVE-2020-15852
2020-07-20 19:15:11
ubuntucve
ubuntucve
CVE-2020-15852
2020-07-20 00:00:00
cve
cve
CVE-2020-15852
2020-07-20 19:15:11
debiancve
debiancve
CVE-2020-15852
2020-07-20 19:15:11
nvd
nvd
CVE-2020-15852
2020-07-20 19:15:11
xen
xen
Linux ioperm bitmap context switching issues
2020-07-16 12:00:00
redhatcve
redhatcve
CVE-2020-15852
2020-07-21 12:08:38
prion
prion
Code injection
2020-07-20 19:15:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0333)
2022-01-28 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerability
2020-08-18 21:47:25