CVE-2020-27170
Summary
| CVE | CVE-2020-27170 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-03-20 22:15:00 UTC |
|---|
| Updated | 2023-11-07 03:20:00 UTC |
|---|
| Description | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 32 Update: kernel-5.11.10-100.fc32 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 33 Update: kernel-5.11.8-200.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| kernel/git/torvalds/linux.git - Linux kernel source tree |
MISC |
git.kernel.org |
|
| [SECURITY] [DLA 2610-1] linux-4.19 security update |
MLIST |
lists.debian.org |
|
| oss-security - Re: [CVE-2020-27170] Protection against speculatively out-of-bounds
loads in the Linux kernel can be bypassed by unprivileged local users to leak
content of kernel memory |
MLIST |
www.openwall.com |
|
| Kernel Live Patch Security Notice LSN-0075-1 ≈ Packet Storm |
MISC |
packetstormsecurity.com |
|
| oss-security - [CVE-2020-27170] Protection against speculatively out-of-bounds loads
in the Linux kernel can be bypassed by unprivileged local users to leak
content of kernel memory |
MISC |
www.openwall.com |
|
| [SECURITY] Fedora 33 Update: kernel-5.11.8-200.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: kernel-5.11.8-300.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8 |
MISC |
cdn.kernel.org |
|
| [SECURITY] Fedora 34 Update: kernel-5.11.8-300.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 32 Update: kernel-5.11.10-100.fc32 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159135 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9140)
- 159136 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9141)
- 159179 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9222)
- 159180 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9223)
- 159258 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-2314)
- 174896 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1177-1)
- 174897 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1175-1)
- 174916 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1210-1)
- 174917 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1211-1)
- 174919 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1238-1)
- 178507 Debian Security Update for linux-4.19 (DLA 2610-1)
- 198307 Ubuntu Security Notification for Linux, Linux-aws, Linux-aws-5.4, Linux-azure, Linux-azure-5.4, Linux-gcp, (USN-4887-1)
- 198309 Ubuntu Security Notification for Linux, Linux-aws, Linux-aws-hwe, Linux-azure, Linux-azure-4.15, (USN-4890-1)
- 239403 Red Hat Update for kernel (RHSA-2021:2314)
- 239452 Red Hat Update for kernel-rt (RHSA-2021:2316)
- 257092 CentOS Security Update for kernel (CESA-2021:2314)
- 281069 Fedora Security Update for kernel (FEDORA-2021-e49da8a226)
- 281407 Fedora Security Update for kernel (FEDORA-2021-9503fffad9)
- 281433 Fedora Security Update for kernel (FEDORA-2021-f0181b8085)
- 281434 Fedora Security Update for kernel (FEDORA-2021-e49da8a226)
- 610351 Google Pixel Android July 2021 Security Patch Missing
- 610358 Google Android July 2021 Security Patch Missing for Huawei EMUI
- 670416 EulerOS Security Update for kernel (EulerOS-SA-2021-1983)
- 670438 EulerOS Security Update for kernel (EulerOS-SA-2021-2062)
- 750004 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1573-1)
- 750006 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1596-1)
- 750015 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1624-1)
- 750199 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0758-1)
- 750276 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0532-1)
- 750650 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1975-1)
- 750652 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1977-1)
- 750762 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1977-1)
- 750766 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1975-1)
- 900100 CBL-Mariner Linux Security Update for kernel 5.10.52.1
- 900305 CBL-Mariner Linux Security Update for kernel 5.10.57.1
- 900320 CBL-Mariner Linux Security Update for kernel 5.10.60.1
- 901585 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (6525-1)
- 903299 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3989)
- 906032 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3989-1)
