CVE-2020-10768
Summary
| CVE | CVE-2020-10768 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-16 00:15:00 UTC |
| Updated | 2023-11-07 03:14:00 UTC |
| Description | A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| kernel/git/torvalds/linux.git - Linux kernel source tree | MISC | git.kernel.org | Patch, Vendor Advisory |
| 1845868 – (CVE-2020-10768) CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 174729 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2020:2106-1)
- 352343 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-025
- 353138 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-013
- 610373 Google Android Devices October 2021 Security Patch Missing
- 750376 OpenSUSE Security Update for RT kernel (openSUSE-SU-2021:0242-1)
- 900076 CBL-Mariner Linux Security Update for kernel 5.4.91
- 903692 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3483)
- 905951 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3483-1)