Race condition in Linux kernel - CVE-2020-29369

Vulnerability identifier: #VU91491

CSH Severity: Low

CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-29369

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to a race condition within the unmap_region(), detach_vmas_to_be_unmapped() and __do_munmap() functions in mm/mmap.c. A local user can execute arbitrary code.

Linux kernel
Anolis OS
Ubuntu
bpftool
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.6.0-1048-oem (Ubuntu package)

Install update from vendor's website.

bpftool - update to 4.19.91-26
kernel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
perf - update to 4.19.91-26
python-perf - update to 4.19.91-26
linux-image-oem-20.04 (Ubuntu package) - update to 5.6.0.1048.44
linux-image-5.6.0-1048-oem (Ubuntu package) - update to 5.6.0-1048.52

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=246c320a8cfe0b11d81a4af38fa9985ef0cc9a4c
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2056
• https://security.netapp.com/advisory/ntap-20210115-0001/
• http://www.openwall.com/lists/oss-security/2021/02/10/6
• http://www.openwall.com/lists/oss-security/2021/02/19/8

• Race condition in Linux kernel mm
• Ubuntu update for linux-oem-5.6
• Anolis OS update for kernel(ANCK)4.19