ISOMAN

CVE

CVE-2020-10942

In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.

Severity
MEDIUM
CVSS
5.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
  2. http://www.openwall.com/lists/oss-security/2020/04/15/4
  3. https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
  4. https://git.kernel.org/linus/42d84c8490f9f0931786f1623191fcab397c3d64
  5. https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
  6. https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
  7. https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
  8. https://lkml.org/lkml/2020/2/15/125
  9. https://security.netapp.com/advisory/ntap-20200403-0003/
  10. https://usn.ubuntu.com/4342-1/
  11. https://usn.ubuntu.com/4344-1/
  12. https://usn.ubuntu.com/4345-1/
  13. https://usn.ubuntu.com/4364-1/
  14. https://www.debian.org/security/2020/dsa-4667
  15. https://www.debian.org/security/2020/dsa-4698
  16. http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
  17. http://www.openwall.com/lists/oss-security/2020/04/15/4
  18. https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
  19. https://git.kernel.org/linus/42d84c8490f9f0931786f1623191fcab397c3d64
  20. https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html