CVE-2020-29368

Summary

CVECVE-2020-29368
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2020-11-28 07:15:00 UTC
Updated2022-04-26 16:34:00 UTC
DescriptionAn issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

Risk And Classification

Problem Types: CWE-362

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Linux Linux Kernel All All All All
Operating System Linux Linux Kernel All All All All
Application Netapp Cloud Backup - All All All
Application Netapp Element Software - All All All
Hardware Netapp H410c - All All All
Operating System Netapp H410c Firmware - All All All
Operating System Netapp Hci Bootstrap Os - All All All
Hardware Netapp Hci Compute Node - All All All
Application Netapp Hci Management Node - All All All
Application Netapp Solidfire - All All All

References

ReferenceSourceLinkTags
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.5 MISC cdn.kernel.org Release Notes, Vendor Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree MISC git.kernel.org Patch, Vendor Advisory
2045 - project-zero - Project Zero - Monorail MISC bugs.chromium.org Exploit, Issue Tracking, Patch, Third Party Advisory
CVE-2020-29368 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security CONFIRM security.netapp.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 159492 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-4356)
  • 174764 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2021:0738-1)
  • 174768 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2021:0735-1)
  • 174770 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2021:0741-1)
  • 174772 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2021:0737-1)
  • 174774 SUSE Enterprise Linux Security update for the Linux Kernel (SUSE-SU-2021:0740-1)
  • 174805 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2) (SUSE-SU-2021:0849-1)
  • 174807 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP2) (SUSE-SU-2021:0842-1)
  • 174809 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2) (SUSE-SU-2021:0849-1)
  • 174810 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (SUSE-SU-2021:0853-1)
  • 174811 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2) (SUSE-SU-2021:0840-1)
  • 174812 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (SUSE-SU-2021:0859-1)
  • 174813 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP5) (SUSE-SU-2021:0818-1)
  • 174814 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 22 for SLE 15) (SUSE-SU-2021:0864-1)
  • 174816 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2) (SUSE-SU-2021:0869-1)
  • 174817 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP2) (SUSE-SU-2021:0841-1)
  • 174818 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP5) (SUSE-SU-2021:0809-1)
  • 174819 SUSE Enterprise Linux Security update for the Linux Kernel (Live Patch 18 for SLE 15) (SUSE-SU-2021:0868-1)
  • 174897 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1175-1)
  • 174916 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1210-1)
  • 239816 Red Hat Update for kernel security (RHSA-2021:4356)
  • 239879 Red Hat Update for kernel-rt (RHSA-2021:4140)
  • 240494 Red Hat Update for kernel (RHSA-2022:5220)
  • 240531 Red Hat Update for kernel-rt (RHSA-2022:5224)
  • 240544 Red Hat Update for kernel-rt (RHSA-2022:5633)
  • 240545 Red Hat Update for kernel (RHSA-2022:5626)
  • 610341 Google Android May 2021 Security Patch Missing for LGE
  • 610347 Google Android May 2021 Security Patch Missing for Huawei EMUI
  • 610401 Google Android Devices March 2022 Security Patch Missing
  • 610409 Google Android April 2022 Security Patch Missing for Samsung
  • 750324 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0393-1)
  • 900040 CBL-Mariner Linux Security Update for kernel 5.4.91
  • 902890 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3628)
  • 905998 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3628-1)
  • 940265 AlmaLinux Security Update for kernel (ALSA-2021:4356)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report