Buffer overflow in Linux kernel - CVE-2020-36158

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU92419

Buffer overflow in Linux kernel - CVE-2020-36158

Published: January 5, 2021 / Updated: July 28, 2023


Vulnerability identifier: #VU92419
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-36158
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local privileged user to execute arbitrary code.

The vulnerability exists due to buffer overflow error within the mwifiex_cmd_802_11_ad_hoc_start() function in drivers/net/wireless/marvell/mwifiex/join.c. A local privileged user can execute arbitrary code.


Affected software

Linux kernel
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for Real Time
Ubuntu
openEuler
Fedora
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-4.4.0-204-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-204-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-204-powerpc-smp (Ubuntu package)
linux-image-4.4.0-204-powerpc-e500mc (Ubuntu package)
linux-image-4.4.0-204-lowlatency (Ubuntu package)
linux-image-4.4.0-204-generic-lpae (Ubuntu package)
linux-image-4.4.0-204-generic (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1087-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1089-kvm (Ubuntu package)
linux-image-4.4.0-1123-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1147-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1151-snapdragon (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-137-lowlatency (Ubuntu package)
linux-image-4.15.0-137-generic (Ubuntu package)
linux-image-4.15.0-137-generic-lpae (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1013-dell300x (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1066-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1080-raspi2 (Ubuntu package)
linux-image-4.15.0-1086-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-4.15.0-1094-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1095-aws (Ubuntu package)
linux-image-4.15.0-1097-snapdragon (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1109-azure (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python3-perf
perf
kernel-source
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-devel
kernel-tools-devel
bpftool-debuginfo
kernel
python2-perf
python3-perf-debuginfo
perf-debuginfo
kernel-debuginfo
kernel-tools
kernel-debugsource
bpftool
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-67-generic (Ubuntu package)
linux-image-5.4.0-67-lowlatency (Ubuntu package)
linux-image-5.4.0-67-generic-lpae (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1011-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1030-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1034-kvm (Ubuntu package)
linux-image-5.4.0-1037-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-gcp-edge (Ubuntu package)
linux-image-5.4.0-1038-gcp (Ubuntu package)
linux-image-aws-edge (Ubuntu package)
linux-image-5.4.0-1039-aws (Ubuntu package)
linux-image-5.4.0-1039-oracle (Ubuntu package)
linux-image-azure-edge (Ubuntu package)
linux-image-5.4.0-1041-azure (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.6.0-1053-oem (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-45-lowlatency (Ubuntu package)
linux-image-5.8.0-45-generic-lpae (Ubuntu package)
linux-image-5.8.0-45-generic-64k (Ubuntu package)
linux-image-5.8.0-45-generic (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-5.8.0-1017-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1017-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1020-kvm (Ubuntu package)
linux-image-5.8.0-1022-oracle (Ubuntu package)
linux-image-5.8.0-1024-gcp (Ubuntu package)
linux-image-5.8.0-1024-azure (Ubuntu package)
linux-image-5.8.0-1025-aws (Ubuntu package)
kernel-headers

How to mitigate CVE-2020-36158

Install update from vendor's repository.

linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.204.178
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.204.210, 4.15.0.137.124, 5.4.0.67.70, 5.8.0.45.50
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.204.210, 4.15.0.137.124, 5.4.0.67.70, 5.8.0.45.50
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.204.210
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.204.210
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.204.210
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.204.210
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.204.210, 4.15.0.137.124, 5.4.0.67.70, 5.8.0.45.50
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.4.0.204.210, 4.15.0.137.124, 5.4.0.67.70, 5.8.0.45.50
linux-image-4.4.0-204-powerpc64-smp (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-powerpc64-emb (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-powerpc-smp (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-powerpc-e500mc (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-lowlatency (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-generic-lpae (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-4.4.0-204-generic (Ubuntu package) - update to 4.4.0-204.236~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1087.84, 4.4.0.1123.128, 5.4.0.1039.23, 5.4.0.1039.40, 5.8.0.1025.27
linux-image-4.4.0-1087-aws (Ubuntu package) - update to 4.4.0-1087.91
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1089.87, 4.15.0.1086.82, 5.4.0.1034.32, 5.8.0.1020.22
linux-image-4.4.0-1089-kvm (Ubuntu package) - update to 4.4.0-1089.98
linux-image-4.4.0-1123-aws (Ubuntu package) - update to 4.4.0-1123.137
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1147.147, 4.15.0.1080.77, 5.4.0.1030.65
linux-image-4.4.0-1147-raspi2 (Ubuntu package) - update to 4.4.0-1147.157
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1151.143, 4.15.0.1097.100
linux-image-4.4.0-1151-snapdragon (Ubuntu package) - update to 4.4.0-1151.161
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - update to 4.15.0.137.133
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.137.133
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.137.133, 5.4.0.67.70, 5.4.0.67.75~18.04.62
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.137.133
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.137.133
linux-image-4.15.0-137-lowlatency (Ubuntu package) - addressed in versions 4.15.0-137.141, 4.15.0-137.141~16.04.1
linux-image-4.15.0-137-generic (Ubuntu package) - addressed in versions 4.15.0-137.141, 4.15.0-137.141~16.04.1
linux-image-4.15.0-137-generic-lpae (Ubuntu package) - addressed in versions 4.15.0-137.141, 4.15.0-137.141~16.04.1
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1013.15
linux-image-4.15.0-1013-dell300x (Ubuntu package) - update to 4.15.0-1013.17
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1066.54, 5.4.0.1039.36, 5.4.0.1039.42~18.04.22, 5.8.0.1022.21
linux-image-4.15.0-1066-oracle (Ubuntu package) - addressed in versions 4.15.0-1066.74, 4.15.0-1066.74~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1066.76
linux-image-4.15.0-1080-raspi2 (Ubuntu package) - update to 4.15.0-1080.85
linux-image-4.15.0-1086-kvm (Ubuntu package) - update to 4.15.0-1086.88
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1094.95, 5.8.0.1024.24
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1094.95, 5.4.0.1038.25, 5.4.0.1038.47, 5.8.0.1024.24
linux-image-4.15.0-1094-gcp (Ubuntu package) - addressed in versions 4.15.0-1094.107, 4.15.0-1094.107~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1094.112
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1095.88
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1095.98
linux-image-4.15.0-1095-aws (Ubuntu package) - addressed in versions 4.15.0-1095.102, 4.15.0-1095.102~16.04.1
linux-image-4.15.0-1097-snapdragon (Ubuntu package) - update to 4.15.0-1097.106
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1109.82, 4.15.0.1109.100, 5.4.0.1041.21, 5.4.0.1041.39, 5.8.0.1024.24
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1109.82
linux-image-4.15.0-1109-azure (Ubuntu package) - addressed in versions 4.15.0-1109.121~14.04.1, 4.15.0-1109.121~16.04.1
kernel (Red Hat package) - update to 4.18.0-348.el8
kernel-rt (Red Hat package) - update to 4.18.0-348.rt7.130.el8
python3-perf - update to 4.19.90-2102.2.0.0057
perf - update to 4.19.90-2102.2.0.0057
kernel-source - update to 4.19.90-2102.2.0.0057
python2-perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-devel - update to 4.19.90-2102.2.0.0057
kernel-tools-devel - update to 4.19.90-2102.2.0.0057
bpftool-debuginfo - update to 4.19.90-2102.2.0.0057
kernel - update to 4.19.90-2102.2.0.0057
python2-perf - update to 4.19.90-2102.2.0.0057
python3-perf-debuginfo - update to 4.19.90-2102.2.0.0057
perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools - update to 4.19.90-2102.2.0.0057
kernel-debugsource - update to 4.19.90-2102.2.0.0057
bpftool - update to 4.19.90-2102.2.0.0057
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.67.70, 5.4.0.67.75~18.04.62
linux-image-5.4.0-67-generic (Ubuntu package) - addressed in versions 5.4.0-67.75, 5.4.0-67.75~18.04.1
linux-image-5.4.0-67-lowlatency (Ubuntu package) - addressed in versions 5.4.0-67.75, 5.4.0-67.75~18.04.1
linux-image-5.4.0-67-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-67.75, 5.4.0-67.75~18.04.1
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.67.75~18.04.62
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.67.75~18.04.62
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.67.75~18.04.62
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.67.75~18.04.62
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.67.75~18.04.62
linux-image-5.4.0-1011-gkeop (Ubuntu package) - addressed in versions 5.4.0-1011.12, 5.4.0-1011.12~18.04.2
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1011.12~18.04.12, 5.4.0.1011.14
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1011.14
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1030.33
linux-image-5.4.0-1030-raspi (Ubuntu package) - addressed in versions 5.4.0-1030.33, 5.4.0-1030.33~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1030.65, 5.8.0.1017.20
linux-image-5.4.0-1034-kvm (Ubuntu package) - update to 5.4.0-1034.35
linux-image-5.4.0-1037-gke (Ubuntu package) - update to 5.4.0-1037.39~18.04.1
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1037.39~18.04.5
linux-image-gcp-edge (Ubuntu package) - update to 5.4.0.1038.25
linux-image-5.4.0-1038-gcp (Ubuntu package) - addressed in versions 5.4.0-1038.41, 5.4.0-1038.41~18.04.1
linux-image-aws-edge (Ubuntu package) - update to 5.4.0.1039.23
linux-image-5.4.0-1039-aws (Ubuntu package) - addressed in versions 5.4.0-1039.41, 5.4.0-1039.41~18.04.1
linux-image-5.4.0-1039-oracle (Ubuntu package) - addressed in versions 5.4.0-1039.42, 5.4.0-1039.42~18.04.1
linux-image-azure-edge (Ubuntu package) - update to 5.4.0.1041.21
linux-image-5.4.0-1041-azure (Ubuntu package) - addressed in versions 5.4.0-1041.43, 5.4.0-1041.43~18.04.1
linux-image-oem-20.04 (Ubuntu package) - addressed in versions 5.6.0.1053.49, 5.8.0.45.50
linux-image-5.6.0-1053-oem (Ubuntu package) - update to 5.6.0-1053.57
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.45.50
linux-image-5.8.0-45-lowlatency (Ubuntu package) - update to 5.8.0-45.51~20.04.1
linux-image-5.8.0-45-generic-lpae (Ubuntu package) - update to 5.8.0-45.51~20.04.1
linux-image-5.8.0-45-generic-64k (Ubuntu package) - update to 5.8.0-45.51~20.04.1
linux-image-5.8.0-45-generic (Ubuntu package) - update to 5.8.0-45.51~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.45.51~20.04.31
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.45.51~20.04.31
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.45.51~20.04.31
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.45.51~20.04.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.45.51~20.04.31
linux-image-5.8.0-1017-raspi-nolpae (Ubuntu package) - update to 5.8.0-1017.20
linux-image-5.8.0-1017-raspi (Ubuntu package) - update to 5.8.0-1017.20
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1017.20
linux-image-5.8.0-1020-kvm (Ubuntu package) - update to 5.8.0-1020.22
linux-image-5.8.0-1022-oracle (Ubuntu package) - update to 5.8.0-1022.23
linux-image-5.8.0-1024-gcp (Ubuntu package) - update to 5.8.0-1024.25
linux-image-5.8.0-1024-azure (Ubuntu package) - update to 5.8.0-1024.26
linux-image-5.8.0-1025-aws (Ubuntu package) - update to 5.8.0-1025.27
kernel-headers - update to 5.10.6-200.fc33
kernel - update to 5.10.6-200.fc33

External References

Related Security Bulletins