ID:8933 - Exploit for Buffer overflow in Linux kernel - CVE-2020-8835

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in bpf verifier for 32 bit systems in Linux kernel. A local user can rigger a buffer overflow and gain access to sensitive information or execute arbitrary code on the system with elevated privileges.

Remediation

Install updates from vendor's website.

As a temporary solution set the following sysctl:

kernel.unprivileged_bpf_disabled = 1