Buffer access with incorrect length value in Linux kernel - CVE-2020-10774

Vulnerability identifier: #VU92760

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-10774

CWE-ID: CWE-805

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to sensitive information.

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.

Linux kernel
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
kernel (Red Hat package)

Install update from vendor's repository.

kernel (Red Hat package) - update to 4.18.0-240.el8

• https://bugzilla.redhat.com/show_bug.cgi?id=1846964

• Buffer access with incorrect length value in Linux kernel
• Red Hat Enterprise Linux 8 update for kernel