Ubuntu.comUB:CVE-2020-9391CVE-2020-9391
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.6%
An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on
the AArch64 architecture. It ignores the top byte in the address passed to
the brk system call, potentially moving the memory break downwards when the
application expects it to move upwards, aka CID-dcde237319e6. This has been
observed to cause heap corruption with the GNU C Library malloc
implementation.
References
www.openwall.com/lists/oss-security/2020/02/25/6
bugzilla.redhat.com/show_bug.cgi?id=1797052
git.kernel.org/linus/dcde237319e626d1ec3c9d8b7613032f0fd4663a
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663a
launchpad.net/bugs/cve/CVE-2020-9391
nvd.nist.gov/vuln/detail/CVE-2020-9391
security-tracker.debian.org/tracker/CVE-2020-9391
www.cve.org/CVERecord?id=CVE-2020-9391
Related
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.6%