Permissions, Privileges, and Access Controls in Linux kernel - CVE-2020-10751

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU28290

Permissions, Privileges, and Access Controls in Linux kernel - CVE-2020-10751

Published: May 27, 2020


Vulnerability identifier: #VU28290
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-10751
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due in the Linux kernels SELinux LSM hook implementation where the kernel incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.


Affected software

Linux kernel
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Slackware Linux
Ubuntu
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-4.4.227/kernel-modules
linux-4.4.227/kernel-huge
linux-4.4.227/kernel-generic
linux-4.4.227/kernel-headers
kernel
python-perf
kernel-tools-libs-devel
bpftool
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
kernel-tools
kernel-tools-libs
perf
linux-image-gke-5.0 (Ubuntu package)
linux-image-5.0.0-1043-gke (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.0.0-1063-oem-osp1 (Ubuntu package)
linux-image-5.3.0-62-snapdragon (Ubuntu package)
linux-image-5.3.0-62-lowlatency (Ubuntu package)
linux-image-5.3.0-62-generic (Ubuntu package)
linux-image-5.3.0-62-generic-lpae (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-gkeop-5.3 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.3.0-1024-kvm (Ubuntu package)
linux-image-raspi2-hwe-18.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.3.0-1028-oracle (Ubuntu package)
linux-image-5.3.0-1028-raspi2 (Ubuntu package)
linux-image-gke-5.3 (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.3.0-1030-gcp (Ubuntu package)
linux-image-5.3.0-1030-aws (Ubuntu package)
linux-image-5.3.0-1030-gke (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.3.0-1032-azure (Ubuntu package)

How to mitigate CVE-2020-10751

Install updates from vendor's website.

kernel (Red Hat package) - addressed in versions 3.10.0-1160.el7, 4.18.0-240.el8
kernel-rt (Red Hat package) - update to 3.10.0-1160.rt56.1131.el7
linux-4.4.227/kernel-modules - update to 4.4.227
linux-4.4.227/kernel-huge - update to 4.4.227
linux-4.4.227/kernel-generic - update to 4.4.227
linux-4.4.227/kernel-headers - update to 4.4.227_smp
kernel - update to 4.19.91-26
python-perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
bpftool - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
perf - update to 4.19.91-26
linux-image-gke-5.0 (Ubuntu package) - update to 5.0.0.1043.28
linux-image-5.0.0-1043-gke (Ubuntu package) - update to 5.0.0-1043.44
linux-image-oem-osp1 (Ubuntu package) - update to 5.0.0.1063.61
linux-image-5.0.0-1063-oem-osp1 (Ubuntu package) - update to 5.0.0-1063.68
linux-image-5.3.0-62-snapdragon (Ubuntu package) - update to 5.3.0-62.56
linux-image-5.3.0-62-lowlatency (Ubuntu package) - addressed in versions 5.3.0-62.56, 5.3.0-62.56~18.04.1
linux-image-5.3.0-62-generic (Ubuntu package) - addressed in versions 5.3.0-62.56, 5.3.0-62.56~18.04.1
linux-image-5.3.0-62-generic-lpae (Ubuntu package) - update to 5.3.0-62.56~18.04.1
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-gkeop-5.3 (Ubuntu package) - update to 5.3.0.62.115
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-5.3.0-1024-kvm (Ubuntu package) - update to 5.3.0-1024.26
linux-image-raspi2-hwe-18.04 (Ubuntu package) - update to 5.3.0.1028.17
linux-image-oracle (Ubuntu package) - update to 5.3.0.1028.25
linux-image-5.3.0-1028-oracle (Ubuntu package) - addressed in versions 5.3.0-1028.30, 5.3.0-1028.30~18.04.1
linux-image-5.3.0-1028-raspi2 (Ubuntu package) - update to 5.3.0-1028.30~18.04.2
linux-image-gke-5.3 (Ubuntu package) - update to 5.3.0.1030.15
linux-image-gcp (Ubuntu package) - update to 5.3.0.1030.24
linux-image-aws (Ubuntu package) - update to 5.3.0.1030.28
linux-image-5.3.0-1030-gcp (Ubuntu package) - addressed in versions 5.3.0-1030.32, 5.3.0-1030.32~18.04.1
linux-image-5.3.0-1030-aws (Ubuntu package) - addressed in versions 5.3.0-1030.32, 5.3.0-1030.32~18.04.1
linux-image-5.3.0-1030-gke (Ubuntu package) - update to 5.3.0-1030.32~18.04.1
linux-image-azure (Ubuntu package) - update to 5.3.0.1032.28
linux-image-5.3.0-1032-azure (Ubuntu package) - addressed in versions 5.3.0-1032.33, 5.3.0-1032.33~18.04.1

External References

Related Security Bulletins