Incorrect Conversion between Numeric Types in Linux kernel - CVE-2020-28588

Vulnerability identifier: #VU52687

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-28588

CWE-ID: CWE-681

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain unauthorized access to sensitive information on the system.

The vulnerability exists due to incorrect conversion between numeric types in the /proc/pid/syscall functionality. A local attacker can read /proc/pid/syscall to trigger this vulnerability, leading to the kernel leaking memory contents.

Linux kernel
Ubuntu
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-66-generic (Ubuntu package)
linux-image-5.4.0-66-generic-lpae (Ubuntu package)
linux-image-5.4.0-66-lowlatency (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1010-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.4.0-1029-raspi (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1033-kvm (Ubuntu package)
linux-image-5.4.0-1036-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1037-gcp (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.4.0-1038-aws (Ubuntu package)
linux-image-5.4.0-1038-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.4.0-1040-azure (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.6.0-1048-oem (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-44-generic-64k (Ubuntu package)
linux-image-5.8.0-44-generic (Ubuntu package)
linux-image-5.8.0-44-generic-lpae (Ubuntu package)
linux-image-5.8.0-44-lowlatency (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1016-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1016-raspi (Ubuntu package)
linux-image-5.8.0-1019-kvm (Ubuntu package)
linux-image-5.8.0-1021-oracle (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.8.0-1023-gcp (Ubuntu package)
linux-image-5.8.0-1023-azure (Ubuntu package)
linux-image-5.8.0-1024-aws (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 5.10 rc7
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.8.0.44.49
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.8.0.44.49
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.8.0.44.49
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.8.0.44.49
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.4.0.66.74~18.04.61
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.66.69, 5.4.0.66.74~18.04.61
linux-image-5.4.0-66-generic (Ubuntu package) - addressed in versions 5.4.0-66.74, 5.4.0-66.74~18.04.2
linux-image-5.4.0-66-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-66.74, 5.4.0-66.74~18.04.2
linux-image-5.4.0-66-lowlatency (Ubuntu package) - addressed in versions 5.4.0-66.74, 5.4.0-66.74~18.04.2
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.66.74~18.04.61
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.66.74~18.04.61
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.66.74~18.04.61
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.66.74~18.04.61
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.66.74~18.04.61
linux-image-5.4.0-1010-gkeop (Ubuntu package) - addressed in versions 5.4.0-1010.11, 5.4.0-1010.11~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1010.11~18.04.11, 5.4.0.1010.13
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1010.13
linux-image-5.4.0-1029-raspi (Ubuntu package) - addressed in versions 5.4.0-1029.32, 5.4.0-1029.32~18.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1029.32
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1029.64
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1029.64, 5.8.0.1016.19
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1033.31, 5.8.0.1019.21
linux-image-5.4.0-1033-kvm (Ubuntu package) - update to 5.4.0-1033.34
linux-image-5.4.0-1036-gke (Ubuntu package) - update to 5.4.0-1036.38~18.04.1
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1036.38~18.04.4
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1037.24, 5.4.0.1037.46, 5.8.0.1023.23
linux-image-5.4.0-1037-gcp (Ubuntu package) - addressed in versions 5.4.0-1037.40, 5.4.0-1037.40~18.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1038.22, 5.4.0.1038.39, 5.8.0.1024.26
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1038.35, 5.4.0.1038.41~18.04.21, 5.8.0.1021.20
linux-image-5.4.0-1038-aws (Ubuntu package) - addressed in versions 5.4.0-1038.40, 5.4.0-1038.40~18.04.1
linux-image-5.4.0-1038-oracle (Ubuntu package) - addressed in versions 5.4.0-1038.41, 5.4.0-1038.41~18.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1040.20, 5.4.0.1040.38, 5.8.0.1023.23
linux-image-5.4.0-1040-azure (Ubuntu package) - addressed in versions 5.4.0-1040.42, 5.4.0-1040.42~18.04.1
linux-image-oem-20.04 (Ubuntu package) - addressed in versions 5.6.0.1048.44, 5.8.0.44.49
linux-image-5.6.0-1048-oem (Ubuntu package) - update to 5.6.0-1048.52
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.44.49
linux-image-5.8.0-44-generic-64k (Ubuntu package) - update to 5.8.0-44.50
linux-image-5.8.0-44-generic (Ubuntu package) - update to 5.8.0-44.50~20.04.1
linux-image-5.8.0-44-generic-lpae (Ubuntu package) - update to 5.8.0-44.50~20.04.1
linux-image-5.8.0-44-lowlatency (Ubuntu package) - update to 5.8.0-44.50~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.44.50~20.04.30
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.44.50~20.04.30
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.44.50~20.04.30
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.44.50~20.04.30
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.44.50~20.04.30
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1016.19
linux-image-5.8.0-1016-raspi-nolpae (Ubuntu package) - update to 5.8.0-1016.19
linux-image-5.8.0-1016-raspi (Ubuntu package) - update to 5.8.0-1016.19
linux-image-5.8.0-1019-kvm (Ubuntu package) - update to 5.8.0-1019.21
linux-image-5.8.0-1021-oracle (Ubuntu package) - update to 5.8.0-1021.22
linux-image-gke (Ubuntu package) - update to 5.8.0.1023.23
linux-image-5.8.0-1023-gcp (Ubuntu package) - update to 5.8.0-1023.24
linux-image-5.8.0-1023-azure (Ubuntu package) - update to 5.8.0-1023.25
linux-image-5.8.0-1024-aws (Ubuntu package) - update to 5.8.0-1024.26

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1211

• Information disclosure in Linux kernel
• Ubuntu update for linux-oem-5.6
• Ubuntu update for linux
• Ubuntu update for linux