CVE-2020-15780 — Missing Authorization in Kernel

CWE-862 — Missing Authorization CWE-863 — Incorrect Authorization CWE-284 — Improper Access Control13 documents9 sources

Severity

6.7MEDIUMNVD

EPSS

0.7%

top 28.05%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Linux Kernel Canonical Ubuntu Linux Opensuse Leap

Timeline

PublishedJul 15

Latest updateMay 24

Description

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages3 packages

▶NVDlinux/linux_kernel< 5.7.7

▶Debianlinux/linux_kernel< 5.7.10-1+3

▶NVDopensuse/leap15.1, 15.2+1

Also affects: Ubuntu Linux 16.04, 18.04, 20.04

Patches

Patch: www.openwall.com ↗Patch: git.kernel.org ↗Patch: git.zx2c4.com ↗

🔴Vulnerability Details

GHSA

GHSA-j334-hj6g-m96m: An issue was discovered in drivers/acpi/acpi_configfs↗2022-05-24

▶

CVEList

CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs↗2020-07-15

▶

OSV

CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs↗2020-07-15

▶

📋Vendor Advisories

Ubuntu

linux kernel vulnerabilities↗2020-07-31

▶

Ubuntu

Linux kernel vulnerabilities↗2020-07-27

▶

Ubuntu

Linux kernel vulnerabilities↗2020-07-27

▶

Ubuntu

Linux kernel vulnerabilities↗2020-07-27

▶

Microsoft

▶

💬Community

Bugzilla

CVE-2020-15780 kernel: injection of malicious ACPI tables via configfs can be used to bypass lockdown and secure boot restrictions [fedora-all]↗2020-07-16

▶

Bugzilla

CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs↗2020-07-01

▶