Integer overflow in Intel Graphics Driver for Windows and Intel Graphics Driver for Linux - CVE-2020-12362

Vulnerability identifier: #VU54234

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-12362

CWE-ID: CWE-190

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow. A local user can run a specially crafted program to trigger integer overflow and execute arbitrary code with elevated privileges.

Intel Graphics Driver for Windows
Intel Graphics Driver for Linux
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel-livepatch-5_3_18-24_52-default
kernel-livepatch-5_3_18-24_52-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_11-debugsource
kernel-headers
bpftool
kernel
kernel-core
kernel-cross-headers
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-devel
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
perf
python3-perf
kernel-abi-whitelists
kernel-doc
kernel-azure
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-azure-devel-debuginfo
kernel-syms-azure
kernel-devel-azure
kernel-source-azure
kernel-default-devel-debuginfo
cluster-md-kmp-default-debuginfo
kernel-default-devel
kernel-source
kernel-docs
kernel-preempt-devel-debuginfo
kernel-preempt-devel
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-syms
kernel-preempt
kernel-macros
cluster-md-kmp-default
ocfs2-kmp-default-debuginfo
dlm-kmp-default
dlm-kmp-default-debuginfo
gfs2-kmp-default
gfs2-kmp-default-debuginfo
ocfs2-kmp-default
kernel-obs-build
kernel-default
kernel-default-debuginfo
kernel-default-debugsource
kernel-default-extra
kernel-default-extra-debuginfo
kernel-preempt-extra
kernel-preempt-extra-debuginfo
kernel-default-livepatch
kernel-default-livepatch-devel
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-obs-build-debugsource
kernel-default-base
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
kernel-rt
gfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-source-rt
kernel-devel-rt
kernel-rt-debuginfo
kernel-rt-debugsource
kernel-rt-devel
kernel-rt-devel-debuginfo
kernel-rt_debug-debuginfo
kernel-rt_debug-debugsource
kernel-rt_debug-devel
kernel-rt_debug-devel-debuginfo
ocfs2-kmp-rt-debuginfo
kernel-syms-rt
ucode-amd
kernel-firmware
linux-firmware (Red Hat package)
SUSE Manager Retail Branch Server
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE MicroOS
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise High Availability
OpenShift Virtualization
Session Smart Router

Install updates from vendor's website.

Intel Graphics Driver for Windows - update to 26.20.100.7212
Intel Graphics Driver for Linux - update to 26.20.100.7212
kernel (Red Hat package) - addressed in versions 2.6.32-754.41.2.el6, 3.10.0-514.89.1.el7, 3.10.0-693.87.1.el7, 3.10.0-957.76.1.el7, 3.10.0-1062.51.1.el7, 3.10.0-1160.31.1.el7, 4.18.0-147.48.1.el8_1, 4.18.0-193.56.1.el8_2
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.31.1.rt56.1169.el7, 4.18.0-193.56.1.rt13.106.el8_2
kernel-livepatch-5_3_18-24_52-default - update to 1-5.3.1
kernel-livepatch-5_3_18-24_52-default-debuginfo - update to 1-5.3.1
kernel-livepatch-SLE15-SP2_Update_11-debugsource - update to 1-5.3.1
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0
kernel-headers - update to 4.18.0-193.56.1
bpftool - update to 4.18.0-193.56.1
kernel - update to 4.18.0-193.56.1
kernel-core - update to 4.18.0-193.56.1
kernel-cross-headers - update to 4.18.0-193.56.1
kernel-debug - update to 4.18.0-193.56.1
kernel-debug-core - update to 4.18.0-193.56.1
kernel-debug-devel - update to 4.18.0-193.56.1
kernel-debug-modules - update to 4.18.0-193.56.1
kernel-debug-modules-extra - update to 4.18.0-193.56.1
kernel-devel - update to 4.18.0-193.56.1
kernel-modules - update to 4.18.0-193.56.1
kernel-modules-extra - update to 4.18.0-193.56.1
kernel-tools - update to 4.18.0-193.56.1
kernel-tools-libs - update to 4.18.0-193.56.1
perf - update to 4.18.0-193.56.1
python3-perf - update to 4.18.0-193.56.1
kernel-abi-whitelists - update to 4.18.0-193.56.1
kernel-doc - update to 4.18.0-193.56.1
kernel-azure - update to 5.3.18-18.38.1
kernel-azure-debuginfo - update to 5.3.18-18.38.1
kernel-azure-debugsource - update to 5.3.18-18.38.1
kernel-azure-devel - update to 5.3.18-18.38.1
kernel-azure-devel-debuginfo - update to 5.3.18-18.38.1
kernel-syms-azure - update to 5.3.18-18.38.1
kernel-devel-azure - update to 5.3.18-18.38.1
kernel-source-azure - update to 5.3.18-18.38.1
kernel-default-devel-debuginfo - update to 5.3.18-24.52.1
cluster-md-kmp-default-debuginfo - update to 5.3.18-24.52.1
kernel-default-devel - update to 5.3.18-24.52.1
kernel-source - update to 5.3.18-24.52.1
kernel-docs - update to 5.3.18-24.52.1
kernel-preempt-devel-debuginfo - update to 5.3.18-24.52.1
kernel-preempt-devel - update to 5.3.18-24.52.1
kernel-preempt-debugsource - update to 5.3.18-24.52.1
kernel-preempt-debuginfo - update to 5.3.18-24.52.1
kernel-syms - update to 5.3.18-24.52.1
kernel-preempt - update to 5.3.18-24.52.1
kernel-devel - update to 5.3.18-24.52.1
kernel-macros - update to 5.3.18-24.52.1
cluster-md-kmp-default - update to 5.3.18-24.52.1
ocfs2-kmp-default-debuginfo - update to 5.3.18-24.52.1
dlm-kmp-default - update to 5.3.18-24.52.1
dlm-kmp-default-debuginfo - update to 5.3.18-24.52.1
gfs2-kmp-default - update to 5.3.18-24.52.1
gfs2-kmp-default-debuginfo - update to 5.3.18-24.52.1
ocfs2-kmp-default - update to 5.3.18-24.52.1
kernel-obs-build - update to 5.3.18-24.52.1
kernel-default - update to 5.3.18-24.52.1
kernel-default-debuginfo - update to 5.3.18-24.52.1
kernel-default-debugsource - update to 5.3.18-24.52.1
kernel-default-extra - update to 5.3.18-24.52.1
kernel-default-extra-debuginfo - update to 5.3.18-24.52.1
kernel-preempt-extra - update to 5.3.18-24.52.1
kernel-preempt-extra-debuginfo - update to 5.3.18-24.52.1
kernel-default-livepatch - update to 5.3.18-24.52.1
kernel-default-livepatch-devel - update to 5.3.18-24.52.1
reiserfs-kmp-default - update to 5.3.18-24.52.1
reiserfs-kmp-default-debuginfo - update to 5.3.18-24.52.1
kernel-obs-build-debugsource - update to 5.3.18-24.52.1
kernel-default-base - update to 5.3.18-24.52.1.9.24.1
gfs2-kmp-rt - update to 5.3.18-28.1
dlm-kmp-rt-debuginfo - update to 5.3.18-28.1
kernel-rt - update to 5.3.18-28.1
gfs2-kmp-rt-debuginfo - update to 5.3.18-28.1
ocfs2-kmp-rt - update to 5.3.18-28.1
dlm-kmp-rt - update to 5.3.18-28.1
cluster-md-kmp-rt-debuginfo - update to 5.3.18-28.1
cluster-md-kmp-rt - update to 5.3.18-28.1
kernel-source-rt - update to 5.3.18-28.1
kernel-devel-rt - update to 5.3.18-28.1
kernel-rt-debuginfo - update to 5.3.18-28.1
kernel-rt-debugsource - update to 5.3.18-28.1
kernel-rt-devel - update to 5.3.18-28.1
kernel-rt-devel-debuginfo - update to 5.3.18-28.1
kernel-rt_debug-debuginfo - update to 5.3.18-28.1
kernel-rt_debug-debugsource - update to 5.3.18-28.1
kernel-rt_debug-devel - update to 5.3.18-28.1
kernel-rt_debug-devel-debuginfo - update to 5.3.18-28.1
ocfs2-kmp-rt-debuginfo - update to 5.3.18-28.1
kernel-syms-rt - update to 5.3.18-28.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
ucode-amd - update to 20200107-3.18.1
kernel-firmware - update to 20200107-3.18.1
linux-firmware (Red Hat package) - update to 20201218-102.git05789708.el8

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

• Multiple vulnerabilities in Intel Graphics Drivers
• CentOS 7 update for kernel
• Red Hat Enterprise Linux 7.4 update for kernel
• Red Hat Enterprise Linux for Real Time 8.2 update for kernel-rt
• Red Hat Enterprise Linux 8.2 update for kernel
• Red Hat Enterprise Linux 7.3 update for kernel
• Red Hat Enterprise Linux 7 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Red Hat Enterprise Linux 7.6 update for kernel
• Red Hat Enterprise Linux 7.7 update for kernel
• Red Hat Enterprise Linux 6 Extended Lifecycle Support update for kernel
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• Red Hat Enterprise Linux 8 update for linux-firmware
• Red Hat Enterprise Linux 8.1 Extended Update Support update for kernel
• SUSE update for kernel-firmware
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Anolis OS update for kernel