CVE-2020-29369Race Condition in Kernel

Severity
7.0HIGHNVD
OSV5.4
EPSS
0.1%
top 76.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 28
Latest updateSep 26

Description

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages4 packages

NVDlinux/linux_kernel4.205.4.54+1
Debianlinux/linux_kernel< 5.7.17-1+3
debiandebian/linux< linux 5.7.17-1 (bookworm)

Patches

🔴Vulnerability Details

3
GHSA
GHSA-rp7p-r22g-55vr: An issue was discovered in mm/mmap2022-05-24
OSV
linux-oem-5.6 vulnerabilities2021-02-25
OSV
CVE-2020-29369: An issue was discovered in mm/mmap2020-11-28

📋Vendor Advisories

4
Ubuntu
Linux kernel (OEM) vulnerabilities2021-02-25
Microsoft
An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations 2020-11-10
Red Hat
kernel: race condition between expand_downwards and expand_upwards and page-table free operations from an munmap call2020-07-24
Debian
CVE-2020-29369: linux - An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is...2020

📄Research Papers

1
arXiv
Timeloops: Automatic System Call Policy Learning for Containerized Microservices2022-09-26