Out-of-bounds write in Linux kernel - CVE-2020-0465

Vulnerability identifier: #VU66026

CSH Severity: Medium

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0465

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker with physical access to escalate privileges on the system.

The vulnerability exists due to an out of bounds write in various methods of hid-multitouch.c. An attacker with physical access can trigger out-of-bounds write and escalate privileges on the system.

Linux kernel
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Anolis OS
openEuler
Ubuntu
IBM Security Guardium
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-doc
bpftool
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf
kernel-abi-whitelists
kernel-source
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
kernel-debugsource
kernel-debuginfo
perf-debuginfo
python3-perf-debuginfo
python2-perf
python3-perf
bpftool-debuginfo
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.6.0-1053-oem (Ubuntu package)
IBM QRadar Network Security
XtremIO X2
CTPView
Juniper Junos Space

Install updates from vendor's website.

kernel (Red Hat package) - update to 3.10.0-1160.59.1.el7
kernel-rt (Red Hat package) - update to 3.10.0-1160.59.1.rt56.1200.el7
kernel-doc - update to 3.10.0-1160.59.1.0.1
bpftool - update to 3.10.0-1160.59.1.0.1
kernel - update to 3.10.0-1160.59.1.0.1
kernel-debug - update to 3.10.0-1160.59.1.0.1
kernel-debug-devel - update to 3.10.0-1160.59.1.0.1
kernel-devel - update to 3.10.0-1160.59.1.0.1
kernel-headers - update to 3.10.0-1160.59.1.0.1
kernel-tools - update to 3.10.0-1160.59.1.0.1
kernel-tools-libs - update to 3.10.0-1160.59.1.0.1
kernel-tools-libs-devel - update to 3.10.0-1160.59.1.0.1
perf - update to 3.10.0-1160.59.1.0.1
python-perf - update to 3.10.0-1160.59.1.0.1
kernel-abi-whitelists - update to 3.10.0-1160.59.1.0.1
kernel-devel - update to 4.19.90-2102.2.0.0057
perf - update to 4.19.90-2102.2.0.0057
kernel-source - update to 4.19.90-2102.2.0.0057
python2-perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools-devel - update to 4.19.90-2102.2.0.0057
kernel - update to 4.19.90-2102.2.0.0057
bpftool - update to 4.19.90-2102.2.0.0057
kernel-debugsource - update to 4.19.90-2102.2.0.0057
kernel-tools - update to 4.19.90-2102.2.0.0057
kernel-debuginfo - update to 4.19.90-2102.2.0.0057
perf-debuginfo - update to 4.19.90-2102.2.0.0057
python3-perf-debuginfo - update to 4.19.90-2102.2.0.0057
python2-perf - update to 4.19.90-2102.2.0.0057
python3-perf - update to 4.19.90-2102.2.0.0057
bpftool-debuginfo - update to 4.19.90-2102.2.0.0057
IBM QRadar Network Security - addressed in versions 5.4.0.17, 5.5.0.12
linux-image-oem-20.04 (Ubuntu package) - update to 5.6.0.1053.49
linux-image-5.6.0-1053-oem (Ubuntu package) - update to 5.6.0-1053.57
XtremIO X2 - update to 6.4.2-13
CTPView - update to 9.1R5
Juniper Junos Space - update to 22.2R1

• https://source.android.com/security/bulletin/2020-12-01

• Out-of-bounds write in Linux kernel
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in IBM QRadar Network Security
• Red Hat Enterprise Linux 7 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Juniper Networks CTPView
• Ubuntu update for linux-oem-5.6
• openEuler 20.03 LTS SP1 update for kernel
• Multiple vulnerabilities in Dell XtremIO X2
• Anolis OS update for kernel(RHCK)3.10