Use of uninitialized resource in Linux kernel - CVE-2020-10732

Vulnerability identifier: #VU92424

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-10732

CWE-ID: CWE-908

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to read memory contents or crash the application.

The vulnerability exists due to use of uninitialized resource error within the fill_thread_core_info() function in fs/binfmt_elf.c. A local user can read memory contents or crash the application.

Linux kernel
Anolis OS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Slackware Linux
Ubuntu
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-4.4.227/kernel-modules
linux-4.4.227/kernel-huge
linux-4.4.227/kernel-generic
linux-4.4.227/kernel-headers
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.15.0-115-lowlatency (Ubuntu package)
linux-image-4.15.0-115-generic-lpae (Ubuntu package)
linux-image-4.15.0-115-generic (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1051-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1067-gke (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1068-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1072-kvm (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1080-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-4.15.0-1081-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1084-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-edge (Ubuntu package)
linux-image-4.15.0-1093-azure (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-4.15.0-1094-oem (Ubuntu package)
kernel-debug
bpftool
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-devel
kernel
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python3-perf
kernel-core
kernel-debug-core
python-perf
linux-image-5.4.0-28-generic (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-40-generic (Ubuntu package)
linux-image-5.4.0-40-generic-lpae (Ubuntu package)
linux-image-5.4.0-40-lowlatency (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1013-raspi (Ubuntu package)
linux-image-5.4.0-1018-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1019-oracle (Ubuntu package)
linux-image-5.4.0-1019-gcp (Ubuntu package)
linux-image-5.4.0-1020-azure (Ubuntu package)
IBM RackSwitch G7028
IBM RackSwitch G8332
IBM Flex System CN4093 10Gb Converged Scalable Switch
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch
IBM Flex System EN2092 1Gb Ethernet Scalable Switch
IBM RackSwitch G8264CS
G8264CS_SI_Fabric_Image
IBM RackSwitch G8264T
IBM RackSwitch G8316
IBM RackSwitch G8124E
IBM RackSwitch G8124
IBM RackSwitch G8264
IBM RackSwitch G8052
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch

Install update from vendor's repository.

kernel (Red Hat package) - addressed in versions 3.10.0-1160.el7, 4.18.0-240.el8
kernel-rt (Red Hat package) - update to 3.10.0-1160.rt56.1131.el7
linux-4.4.227/kernel-modules - update to 4.4.227
linux-4.4.227/kernel-huge - update to 4.4.227
linux-4.4.227/kernel-generic - update to 4.4.227
linux-4.4.227/kernel-headers - update to 4.4.227_smp
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.115.103, 5.4.0.40.43
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.115.103, 5.4.0.40.43
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.115.103, 5.4.0.40.43
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.115.103, 5.4.0.40.43
linux-image-4.15.0-115-lowlatency (Ubuntu package) - update to 4.15.0-115.116~16.04.1
linux-image-4.15.0-115-generic-lpae (Ubuntu package) - update to 4.15.0-115.116~16.04.1
linux-image-4.15.0-115-generic (Ubuntu package) - update to 4.15.0-115.116~16.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1051.42, 5.4.0.1019.17
linux-image-4.15.0-1051-oracle (Ubuntu package) - addressed in versions 4.15.0-1051.55, 4.15.0-1051.55~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1051.62
linux-image-4.15.0-1067-gke (Ubuntu package) - update to 4.15.0-1067.70
linux-image-gke-4.15 (Ubuntu package) - update to 4.15.0.1067.71
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1067.71, 4.15.0.1081.83, 5.4.0.1019.17
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1068.66, 5.4.0.1013.13
linux-image-4.15.0-1068-raspi2 (Ubuntu package) - update to 4.15.0-1068.72
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1072.68, 5.4.0.1018.17
linux-image-4.15.0-1072-kvm (Ubuntu package) - update to 4.15.0-1072.73
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1080.77
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1080.82
linux-image-4.15.0-1080-aws (Ubuntu package) - addressed in versions 4.15.0-1080.84, 4.15.0-1080.84~16.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1081.83, 5.4.0.1019.17
linux-image-4.15.0-1081-gcp (Ubuntu package) - addressed in versions 4.15.0-1081.92, 4.15.0-1081.92~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1081.99
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1084.87
linux-image-4.15.0-1084-snapdragon (Ubuntu package) - update to 4.15.0-1084.92
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1093.67
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1093.70, 4.15.0.1093.88, 5.4.0.1020.19
linux-image-azure-edge (Ubuntu package) - update to 4.15.0.1093.88
linux-image-4.15.0-1093-azure (Ubuntu package) - addressed in versions 4.15.0-1093.103, 4.15.0-1093.103~14.04.1, 4.15.0-1093.103~16.04.1
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.1094.98, 5.4.0.40.43
linux-image-4.15.0-1094-oem (Ubuntu package) - update to 4.15.0-1094.104
kernel-debug - addressed in versions 4.19.91-23.4, 4.19.91-26
bpftool - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-debug-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-debug-modules - update to 4.19.91-23.4
kernel-debug-modules-extra - update to 4.19.91-23.4
kernel-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-headers - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-modules - update to 4.19.91-23.4
kernel-modules-extra - update to 4.19.91-23.4
kernel-tools - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-tools-libs - addressed in versions 4.19.91-23.4, 4.19.91-26
kernel-tools-libs-devel - addressed in versions 4.19.91-23.4, 4.19.91-26
perf - addressed in versions 4.19.91-23.4, 4.19.91-26
python3-perf - update to 4.19.91-23.4
kernel-core - update to 4.19.91-23.4
kernel-debug-core - update to 4.19.91-23.4
python-perf - update to 4.19.91-26
linux-image-5.4.0-28-generic (Ubuntu package) - update to 5.4.0-28.32
linux-image-oem-osp1 (Ubuntu package) - update to 5.4.0.40.43
linux-image-5.4.0-40-generic (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-5.4.0-40-generic-lpae (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-5.4.0-40-lowlatency (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-raspi (Ubuntu package) - update to 5.4.0.1013.13
linux-image-5.4.0-1013-raspi (Ubuntu package) - update to 5.4.0-1013.13~18.04.1
linux-image-5.4.0-1018-aws (Ubuntu package) - update to 5.4.0-1018.18~18.04.1
linux-image-aws (Ubuntu package) - update to 5.4.0.1018.19
linux-image-5.4.0-1019-oracle (Ubuntu package) - update to 5.4.0-1019.19~18.04.1
linux-image-5.4.0-1019-gcp (Ubuntu package) - update to 5.4.0-1019.19~18.04.2
linux-image-5.4.0-1020-azure (Ubuntu package) - update to 5.4.0-1020.20~18.04.1
IBM RackSwitch G7028 - update to 7.6.7.0
IBM RackSwitch G8332 - update to 7.7.35.0
IBM Flex System CN4093 10Gb Converged Scalable Switch - update to 7.8.27.0
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch - update to 7.8.27.0
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch - update to 7.8.27.0
IBM Flex System EN2092 1Gb Ethernet Scalable Switch - update to 7.8.27.0
IBM RackSwitch G8264CS - update to 7.8.27.0
G8264CS_SI_Fabric_Image - update to 7.8.27.0
IBM RackSwitch G8264T - update to 7.9.29.0
IBM RackSwitch G8316 - update to 7.9.29.0
IBM RackSwitch G8124E - update to 7.11.19.0
IBM RackSwitch G8124 - update to 7.11.19.0
IBM RackSwitch G8264 - update to 7.11.19.0
IBM RackSwitch G8052 - update to 7.11.19.0

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732
• https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d
• https://github.com/google/kmsan/issues/76
• https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
• https://twitter.com/grsecurity/status/1252558055629299712
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
• https://usn.ubuntu.com/4411-1/
• https://usn.ubuntu.com/4427-1/
• https://usn.ubuntu.com/4439-1/
• https://usn.ubuntu.com/4440-1/
• https://usn.ubuntu.com/4485-1/
• https://security.netapp.com/advisory/ntap-20210129-0005/
• https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/

• Use of uninitialized resource in Linux kernel fs
• Multiple vulnerabilities in IBM RackSwitch firmware products
• Multiple vulnerabilities in IBM Flex System switch firmware products
• Anolis OS update for kernel(ANCK)4.19
• Anolis OS update for kernel(ANCK)4.19
• Ubuntu update for linux
• Ubuntu update for linux
• Slackware Linux update for kernel
• Red Hat Enterprise Linux 8 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Red Hat Enterprise Linux 7 update for kernel