CVE-2020-8428Use After Free in Kernel

CWE-416Use After Free21 documents10 sources
Severity
7.1HIGHNVD
OSV6.5OSV6.2
EPSS
0.1%
top 73.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 29
Latest updateSep 26

Description

fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages8 packages

NVDlinux/linux_kernel4.195.5
Debianlinux/linux_kernel< 5.4.19-1+3
Ubuntulinux/linux_kernel< 4.15.0-96.97+2
debiandebian/linux< linux 5.4.19-1 (bookworm)

Patches

🔴Vulnerability Details

7
GHSA
GHSA-9x38-4g8c-26wp: fs/namei2022-05-24
OSV
linux, linux-aws, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-oracle-5.3, linux-raspi2, linux-raspi2-5.3 vulnerabilities2020-04-10
OSV
Kernel Live Patch Security Notice2020-04-09
OSV
linux-azure, linux-gcp, linux-gke-5.0, linux-oem-osp1, linux-oracle-5.0 vulnerabilities2020-04-07
OSV
linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities2020-04-07

📋Vendor Advisories

9
Android
CVE-2020-8428: Kernel2020-06-01
Ubuntu
Linux kernel vulnerabilities2020-04-10
Ubuntu
Kernel Live Patch Security Notice2020-04-09
Ubuntu
Linux kernel vulnerabilities2020-04-07
Ubuntu
Linux kernel vulnerabilities2020-04-06

📄Research Papers

2
arXiv
Timeloops: Automatic System Call Policy Learning for Containerized Microservices2022-09-26
arXiv
SPI: Automated Identification of Security Patches via Commits2021-06-06

💬Community

2
Bugzilla
CVE-2020-8428 kernel: use-after-free in fs/namei.c2020-01-31
Bugzilla
CVE-2020-8428 kernel: use-after-free in fs/namei.c [fedora-all]2020-01-31