CVE-2020-10711
Summary
| CVE | CVE-2020-10711 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-05-22 15:15:00 UTC |
|---|
| Updated | 2023-11-07 03:14:00 UTC |
|---|
| Description | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| USN-4412-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| USN-4419-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| oss-security - CVE-2020-10711 Kernel: NetLabel: null pointer dereference while
receiving CIPSO packet with null category |
CONFIRM |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| May 2020 Linux Kernel Vulnerabilities in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
Third Party Advisory |
| Debian -- Security Information -- DSA-4699-1 linux |
DEBIAN |
www.debian.org |
Third Party Advisory |
| [security-announce] openSUSE-SU-2020:0935-1: important: Security update |
SUSE |
lists.opensuse.org |
|
| USN-4411-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| 1825116 – (CVE-2020-10711) CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic |
CONFIRM |
bugzilla.redhat.com |
Issue Tracking, Patch, Third Party Advisory |
| [SECURITY] [DLA 2242-1] linux-4.9 security update |
MLIST |
lists.debian.org |
Third Party Advisory |
| USN-4413-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| Debian -- Security Information -- DSA-4698-1 linux |
DEBIAN |
www.debian.org |
Third Party Advisory |
| [security-announce] openSUSE-SU-2020:0801-1: important: Security update |
SUSE |
lists.opensuse.org |
|
| USN-4414-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 352300 Amazon Linux Security Advisory for kernel: ALAC2012-2020-020
- 352358 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-010
- 352359 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-009
- 352360 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-008
- 352361 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-007
- 353140 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-011
- 377065 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2020:0113)
- 390217 Oracle Managed Virtualization (VM) Server for x86 Security Update for Unbreakable Enterprise kernel (OVMSA-2021-0001)
- 390234 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2021-0001)
- 6140132 AWS Bottlerocket Security Update for kernel (GHSA-mgxf-pj6m-9494)
- 750376 OpenSUSE Security Update for RT kernel (openSUSE-SU-2021:0242-1)
- 900076 CBL-Mariner Linux Security Update for kernel 5.4.91
- 903697 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3458)
- 905988 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3458-1)
