Use-after-free in Linux kernel - CVE-2020-8649

Vulnerability identifier: #VU28414

CSH Severity: Medium

CVSS v4: 5.2 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-8649

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local authenticated user to #BASIC_IMPACT#.

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.

Linux kernel
Red Hat Enterprise Linux Workstation
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux Server - TUS
Slackware Linux
Opensuse
Red Hat OpenShift Container Platform
kernel-rt (Red Hat package)
kernel (Red Hat package)
linux-4.4.217/kernel-modules
linux-4.4.217/kernel-huge
linux-4.4.217/kernel-generic
linux-4.4.217/kernel-headers
kernel-debug-modules
bpftool
kernel
kernel-core
kernel-debug
kernel-debug-core
python3-perf
perf
kernel-tools-libs
kernel-debug-devel
kernel-debug-modules-extra
kernel-devel
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs-devel
python-perf

Install update from vendor's website.

Linux kernel - addressed in versions 4.4.216, 4.9.216, 4.14.173, 4.19.109, 5.6
Red Hat OpenShift Container Platform - update to 4.6.57
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.rt56.1131.el7, 4.18.0-193.80.1.rt13.130.el8_2
kernel (Red Hat package) - addressed in versions 3.10.0-1160.el7, 4.18.0-193.80.1.el8_2, 4.18.0-240.el8
linux-4.4.217/kernel-modules - update to 4.4.217
linux-4.4.217/kernel-huge - update to 4.4.217
linux-4.4.217/kernel-generic - update to 4.4.217
linux-4.4.217/kernel-headers - update to 4.4.217_smp
kernel-debug-modules - update to 4.19.91-23.4
bpftool - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-core - update to 4.19.91-23.4
kernel-debug - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-debug-core - update to 4.19.91-23.4
python3-perf - update to 4.19.91-23.4
perf - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-tools-libs - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-debug-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-debug-modules-extra - update to 4.19.91-23.4
kernel-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-headers - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-modules - update to 4.19.91-23.4
kernel-modules-extra - update to 4.19.91-23.4
kernel-tools - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-tools-libs-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
python-perf - update to 4.19.91-26

• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.216
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.216
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.109
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.173
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.9
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.25
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6

• Use-after-free in Linux kernel
• OpenSUSE Linux update for the Linux Kernel
• Red Hat Enterprise Linux for Real Time 8.2 update for kernel-rt
• Red Hat Enterprise Linux 8.2 update for kernel
• Multiple vulnerabilities in OpenShift Container Platform 4.6
• Anolis OS update for kernel(ANCK)4.19
• Anolis OS update for kernel(ANCK)4.19
• Slackware Linux update for kernel
• Red Hat Enterprise Linux 8 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Red Hat Enterprise Linux 7 update for kernel