Concurrent execution using shared resource with improper synchronization ('race condition') in Linux kernel - CVE-2020-29370

Vulnerability identifier: #VU92421

CSH Severity: Low

CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-29370

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to concurrent execution using shared resource with improper synchronization ('race condition') error within the kmem_cache_alloc_bulk() function in mm/slub.c. A local user can execute arbitrary code.

Linux kernel
openEuler
kernel
bpftool
kernel-debugsource
kernel-tools
kernel-debuginfo
perf-debuginfo
python3-perf-debuginfo
python2-perf
python3-perf
bpftool-debuginfo
kernel-tools-devel
kernel-devel
kernel-tools-debuginfo
python2-perf-debuginfo
kernel-source
perf

Install update from vendor's repository.

kernel - update to 4.19.90-2012.5.0.0054
bpftool - update to 4.19.90-2012.5.0.0054
kernel-debugsource - update to 4.19.90-2012.5.0.0054
kernel-tools - update to 4.19.90-2012.5.0.0054
kernel-debuginfo - update to 4.19.90-2012.5.0.0054
perf-debuginfo - update to 4.19.90-2012.5.0.0054
python3-perf-debuginfo - update to 4.19.90-2012.5.0.0054
python2-perf - update to 4.19.90-2012.5.0.0054
python3-perf - update to 4.19.90-2012.5.0.0054
bpftool-debuginfo - update to 4.19.90-2012.5.0.0054
kernel-tools-devel - update to 4.19.90-2012.5.0.0054
kernel-devel - update to 4.19.90-2012.5.0.0054
kernel-tools-debuginfo - update to 4.19.90-2012.5.0.0054
python2-perf-debuginfo - update to 4.19.90-2012.5.0.0054
kernel-source - update to 4.19.90-2012.5.0.0054
perf - update to 4.19.90-2012.5.0.0054

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2022
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd4d9c7d0c71866ec0c2825189ebd2ce35bd95b8
• https://security.netapp.com/advisory/ntap-20201218-0001/

• Concurrent execution using shared resource with improper synchronization ('race condition') in Linux kernel mm
• openEuler 20.03 LTS update for kernel