Input validation error in Intel Graphics Driver for Windows and Intel Graphics Driver for Linux - CVE-2020-12363

Vulnerability identifier: #VU54248

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-12363

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A local user can run a specially crafted program to perform a denial of service (DoS) attack.

Intel Graphics Driver for Windows
Intel Graphics Driver for Linux
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-livepatch-5_3_18-24_52-default
kernel-livepatch-5_3_18-24_52-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_11-debugsource
kernel-source-azure
kernel-azure
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-azure-devel-debuginfo
kernel-syms-azure
kernel-devel-azure
kernel-preempt-extra-debuginfo
kernel-default-livepatch-devel
kernel-default-livepatch
ocfs2-kmp-default-debuginfo
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-obs-build
kernel-obs-build-debugsource
kernel-preempt
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-macros
kernel-devel
kernel-syms
kernel-default-devel-debuginfo
kernel-default-devel
kernel-source
kernel-docs
kernel-preempt-devel-debuginfo
kernel-preempt-devel
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-default-extra-debuginfo
kernel-default-extra
kernel-default-debugsource
kernel-default-debuginfo
kernel-default
kernel-preempt-extra
kernel-default-base
kernel-rt
kernel-rt-devel
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-source-rt
kernel-devel-rt
kernel-rt-debuginfo
kernel-rt-debugsource
kernel-rt-devel-debuginfo
kernel-rt_debug-debuginfo
kernel-rt_debug-debugsource
kernel-rt_debug-devel
kernel-rt_debug-devel-debuginfo
kernel-syms-rt
ocfs2-kmp-rt
ocfs2-kmp-rt-debuginfo
ucode-amd
kernel-firmware
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE MicroOS
SUSE Enterprise Storage
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
CentOS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Real Time for NFV
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise High Availability
OpenShift Virtualization
Session Smart Router

Install updates from vendor's website.

Intel Graphics Driver for Windows - update to 26.20.100.7212
Intel Graphics Driver for Linux - update to 26.20.100.7212
kernel (Red Hat package) - update to 3.10.0-1160.31.1.el7
kernel-rt (Red Hat package) - update to 3.10.0-1160.31.1.rt56.1169.el7
kernel-livepatch-5_3_18-24_52-default - update to 1-5.3.1
kernel-livepatch-5_3_18-24_52-default-debuginfo - update to 1-5.3.1
kernel-livepatch-SLE15-SP2_Update_11-debugsource - update to 1-5.3.1
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0
kernel-source-azure - update to 5.3.18-18.38.1
kernel-azure - update to 5.3.18-18.38.1
kernel-azure-debuginfo - update to 5.3.18-18.38.1
kernel-azure-debugsource - update to 5.3.18-18.38.1
kernel-azure-devel - update to 5.3.18-18.38.1
kernel-azure-devel-debuginfo - update to 5.3.18-18.38.1
kernel-syms-azure - update to 5.3.18-18.38.1
kernel-devel-azure - update to 5.3.18-18.38.1
kernel-preempt-extra-debuginfo - update to 5.3.18-24.52.1
kernel-default-livepatch-devel - update to 5.3.18-24.52.1
kernel-default-livepatch - update to 5.3.18-24.52.1
ocfs2-kmp-default-debuginfo - update to 5.3.18-24.52.1
reiserfs-kmp-default - update to 5.3.18-24.52.1
reiserfs-kmp-default-debuginfo - update to 5.3.18-24.52.1
kernel-obs-build - update to 5.3.18-24.52.1
kernel-obs-build-debugsource - update to 5.3.18-24.52.1
kernel-preempt - update to 5.3.18-24.52.1
ocfs2-kmp-default - update to 5.3.18-24.52.1
gfs2-kmp-default-debuginfo - update to 5.3.18-24.52.1
gfs2-kmp-default - update to 5.3.18-24.52.1
dlm-kmp-default-debuginfo - update to 5.3.18-24.52.1
dlm-kmp-default - update to 5.3.18-24.52.1
cluster-md-kmp-default-debuginfo - update to 5.3.18-24.52.1
cluster-md-kmp-default - update to 5.3.18-24.52.1
kernel-macros - update to 5.3.18-24.52.1
kernel-devel - update to 5.3.18-24.52.1
kernel-syms - update to 5.3.18-24.52.1
kernel-default-devel-debuginfo - update to 5.3.18-24.52.1
kernel-default-devel - update to 5.3.18-24.52.1
kernel-source - update to 5.3.18-24.52.1
kernel-docs - update to 5.3.18-24.52.1
kernel-preempt-devel-debuginfo - update to 5.3.18-24.52.1
kernel-preempt-devel - update to 5.3.18-24.52.1
kernel-preempt-debugsource - update to 5.3.18-24.52.1
kernel-preempt-debuginfo - update to 5.3.18-24.52.1
kernel-default-extra-debuginfo - update to 5.3.18-24.52.1
kernel-default-extra - update to 5.3.18-24.52.1
kernel-default-debugsource - update to 5.3.18-24.52.1
kernel-default-debuginfo - update to 5.3.18-24.52.1
kernel-default - update to 5.3.18-24.52.1
kernel-preempt-extra - update to 5.3.18-24.52.1
kernel-default-base - update to 5.3.18-24.52.1.9.24.1
kernel-rt - update to 5.3.18-28.1
kernel-rt-devel - update to 5.3.18-28.1
gfs2-kmp-rt-debuginfo - update to 5.3.18-28.1
gfs2-kmp-rt - update to 5.3.18-28.1
dlm-kmp-rt-debuginfo - update to 5.3.18-28.1
dlm-kmp-rt - update to 5.3.18-28.1
cluster-md-kmp-rt-debuginfo - update to 5.3.18-28.1
cluster-md-kmp-rt - update to 5.3.18-28.1
kernel-source-rt - update to 5.3.18-28.1
kernel-devel-rt - update to 5.3.18-28.1
kernel-rt-debuginfo - update to 5.3.18-28.1
kernel-rt-debugsource - update to 5.3.18-28.1
kernel-rt-devel-debuginfo - update to 5.3.18-28.1
kernel-rt_debug-debuginfo - update to 5.3.18-28.1
kernel-rt_debug-debugsource - update to 5.3.18-28.1
kernel-rt_debug-devel - update to 5.3.18-28.1
kernel-rt_debug-devel-debuginfo - update to 5.3.18-28.1
kernel-syms-rt - update to 5.3.18-28.1
ocfs2-kmp-rt - update to 5.3.18-28.1
ocfs2-kmp-rt-debuginfo - update to 5.3.18-28.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
ucode-amd - update to 20200107-3.18.1
kernel-firmware - update to 20200107-3.18.1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

• Multiple vulnerabilities in Intel Graphics Drivers
• CentOS 7 update for kernel
• Red Hat Enterprise Linux 7 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• SUSE update for kernel-firmware
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel