Main
Vulnerability Database
Exploits
ID:10347 - Exploit for Improper locking in Linux kernel - CVE-2020-29661
ID:10347 - Exploit for Improper locking in Linux kernel - CVE-2020-29661
Published: August 9, 2024
Vulnerability identifier: #VU51543
Vulnerability risk: Low
CVE-ID: CVE-2020-29661
CWE-ID: CWE-667
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to perform a escalate privileges on the system.
The vulnerability exists due to locking error in the tty subsystem of the Linux kernel in drivers/tty/tty_jobctrl.c. An local user can exploit this vulnerability to trigger a use-after-free error against TIOCSPGRP and execute arbitrary code with elevated privileges.
Remediation
Install updates from vendor's website.