Null pointer dereference in Linux kernel - CVE-2020-25639

Vulnerability identifier: #VU92764

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-25639

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged user to perform a denial of service (DoS) attack.

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

Linux kernel
Ubuntu
Fedora
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-5.4.0-73-generic (Ubuntu package)
linux-image-5.4.0-73-lowlatency (Ubuntu package)
linux-image-5.4.0-73-generic-lpae (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1015-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1035-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1039-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1043-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1043-gcp (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.4.0-1044-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.4.0-1045-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.4.0-1047-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1048-aws (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-53-generic (Ubuntu package)
linux-image-5.8.0-53-lowlatency (Ubuntu package)
linux-image-5.8.0-53-generic-lpae (Ubuntu package)
linux-image-5.8.0-53-generic-64k (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-5.8.0-1024-raspi-nolpae (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1024-raspi (Ubuntu package)
linux-image-5.8.0-1027-kvm (Ubuntu package)
linux-image-5.8.0-1029-oracle (Ubuntu package)
linux-image-5.8.0-1031-gcp (Ubuntu package)
linux-image-5.8.0-1032-azure (Ubuntu package)
linux-image-5.8.0-1033-aws (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-5.10.0-1021-oem (Ubuntu package)
kernel
kernel-headers
kernel-tools

Install update from vendor's repository.

linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.8.0.53.58
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.8.0.53.58
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.4.0.73.82~18.04.66
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.4.0.73.82~18.04.66
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.8.0.53.58
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.73.76, 5.8.0.53.58
linux-image-5.4.0-73-generic (Ubuntu package) - addressed in versions 5.4.0-73.82, 5.4.0-73.82~18.04.1
linux-image-5.4.0-73-lowlatency (Ubuntu package) - addressed in versions 5.4.0-73.82, 5.4.0-73.82~18.04.1
linux-image-5.4.0-73-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-73.82, 5.4.0-73.82~18.04.1
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.73.82~18.04.66
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.73.82~18.04.66
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.73.82~18.04.66
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.73.82~18.04.66
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.73.82~18.04.66
linux-image-5.4.0-1015-gkeop (Ubuntu package) - addressed in versions 5.4.0-1015.16, 5.4.0-1015.16~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1015.16~18.04.16, 5.4.0.1015.18
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1015.18
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1035.37
linux-image-5.4.0-1035-raspi (Ubuntu package) - addressed in versions 5.4.0-1035.38, 5.4.0-1035.38~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1035.70, 5.8.0.1024.27
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1035.70
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1039.37, 5.8.0.1027.29
linux-image-5.4.0-1039-kvm (Ubuntu package) - update to 5.4.0-1039.40
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1043.30, 5.4.0.1043.52, 5.8.0.1031.31
linux-image-5.4.0-1043-gke (Ubuntu package) - addressed in versions 5.4.0-1043.45, 5.4.0-1043.45~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1043.45~18.04.9, 5.4.0.1043.52
linux-image-5.4.0-1043-gcp (Ubuntu package) - addressed in versions 5.4.0-1043.46, 5.4.0-1043.46~18.04.1
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1043.52, 5.8.0.1031.31
linux-image-5.4.0-1044-oracle (Ubuntu package) - update to 5.4.0-1044.47~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1044.47~18.04.26, 5.4.0.1045.44, 5.8.0.1029.28
linux-image-5.4.0-1045-oracle (Ubuntu package) - update to 5.4.0-1045.49+1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1047.26, 5.4.0.1047.45, 5.8.0.1032.32
linux-image-5.4.0-1047-azure (Ubuntu package) - addressed in versions 5.4.0-1047.49, 5.4.0-1047.49~18.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1048.30, 5.4.0.1048.49, 5.8.0.1033.35
linux-image-5.4.0-1048-aws (Ubuntu package) - addressed in versions 5.4.0-1048.50, 5.4.0-1048.50~18.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.8.0.53.58
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.53.58
linux-image-5.8.0-53-generic (Ubuntu package) - update to 5.8.0-53.60~20.04.1
linux-image-5.8.0-53-lowlatency (Ubuntu package) - update to 5.8.0-53.60~20.04.1
linux-image-5.8.0-53-generic-lpae (Ubuntu package) - update to 5.8.0-53.60~20.04.1
linux-image-5.8.0-53-generic-64k (Ubuntu package) - update to 5.8.0-53.60~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.53.60~20.04.37
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.53.60~20.04.37
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.53.60~20.04.37
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.53.60~20.04.37
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.53.60~20.04.37
linux-image-5.8.0-1024-raspi-nolpae (Ubuntu package) - update to 5.8.0-1024.27
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1024.27
linux-image-5.8.0-1024-raspi (Ubuntu package) - update to 5.8.0-1024.27
linux-image-5.8.0-1027-kvm (Ubuntu package) - update to 5.8.0-1027.29
linux-image-5.8.0-1029-oracle (Ubuntu package) - update to 5.8.0-1029.30
linux-image-5.8.0-1031-gcp (Ubuntu package) - update to 5.8.0-1031.32
linux-image-5.8.0-1032-azure (Ubuntu package) - update to 5.8.0-1032.34
linux-image-5.8.0-1033-aws (Ubuntu package) - update to 5.8.0-1033.35
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1021.22
linux-image-5.10.0-1021-oem (Ubuntu package) - update to 5.10.0-1021.22
kernel - addressed in versions 5.10.20-100.fc32, 5.10.20-200.fc33
kernel-headers - addressed in versions 5.10.20-100.fc32, 5.10.20-200.fc33
kernel-tools - addressed in versions 5.10.20-100.fc32, 5.10.20-200.fc33

• https://bugzilla.redhat.com/show_bug.cgi?id=1876995
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5/

• Null pointer dereference in Linux kernel
• Ubuntu update for linux-oem-5.10
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-raspi
• Fedora 33 update for kernel, kernel-headers, kernel-tools
• Fedora 32 update for kernel, kernel-headers, kernel-tools