Use-after-free in Linux kernel - CVE-2020-12464

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29958

Use-after-free in Linux kernel - CVE-2020-12464

Published: July 15, 2020


Vulnerability identifier: #VU29958
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-12464
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the usb_sg_cancel() function in drivers/usb/core/message.c in the Linux kernel. A local user can trigger a use-after-free error during file transfer to USB driver and execute arbitrary code on the system with elevated privileges.


Affected software

Linux kernel
Slackware Linux
linux-4.4.227/kernel-modules
linux-4.4.227/kernel-huge
linux-4.4.227/kernel-generic
linux-4.4.227/kernel-headers
IBM RackSwitch G7028
IBM RackSwitch G8332
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch
IBM RackSwitch G8264CS
G8264CS_SI_Fabric_Image
IBM Flex System CN4093 10Gb Converged Scalable Switch
IBM Flex System EN2092 1Gb Ethernet Scalable Switch
IBM RackSwitch G8264T
IBM RackSwitch G8316
IBM RackSwitch G8124
IBM RackSwitch G8124E
IBM RackSwitch G8264
IBM RackSwitch G8052
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch

How to mitigate CVE-2020-12464

Install updates from vendor's website.

Linux kernel - update to 5.6.8
linux-4.4.227/kernel-modules - update to 4.4.227
linux-4.4.227/kernel-huge - update to 4.4.227
linux-4.4.227/kernel-generic - update to 4.4.227
linux-4.4.227/kernel-headers - update to 4.4.227_smp
IBM RackSwitch G7028 - update to 7.6.6.0
IBM RackSwitch G8332 - update to 7.7.34.0
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch - update to 7.8.26.0
IBM RackSwitch G8264CS - update to 7.8.26.0
G8264CS_SI_Fabric_Image - update to 7.8.26.0
IBM Flex System CN4093 10Gb Converged Scalable Switch - update to 7.8.26.0
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch - update to 7.8.26.0
IBM Flex System EN2092 1Gb Ethernet Scalable Switch - update to 7.8.26.0
IBM RackSwitch G8264T - update to 7.9.28.0
IBM RackSwitch G8316 - update to 7.9.28.0
IBM RackSwitch G8124 - update to 7.11.18.0
IBM RackSwitch G8124E - update to 7.11.18.0
IBM RackSwitch G8264 - update to 7.11.18.0
IBM RackSwitch G8052 - update to 7.11.18.0

External References

Related Security Bulletins