CVE-2020-0431
First published: Thu Sep 17 2020(Updated: )
A flaw out of bounds write in the Linux kernel human interface devices subsystem was found in the way user calls find key code by index. A local user could use this flaw to crash the system or escalate privileges on the system.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:4.18.0-305.rt7.72.el8 | 0:4.18.0-305.rt7.72.el8 |
| redhat/kernel | <0:4.18.0-305.el8 | 0:4.18.0-305.el8 |
| Google Android | ||
| openSUSE | =15.1 | |
| openSUSE | =15.2 |
Remedy
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html
- https://source.android.com/security/bulletin/pixel/2020-09-01
- https://android.googlesource.com/kernel/common/+/cb0a3edf8d00
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1919890
- https://patchwork.kernel.org/project/linux-input/patch/20191207210518.GA181006@dtor-ws/
- https://access.redhat.com/errata/RHSA-2021:1578
- https://access.redhat.com/errata/RHSA-2021:1739
- https://access.redhat.com/security/cve/cve-2020-0431
- https://bugzilla.redhat.com/show_bug.cgi?id=1919889
- https://www.cve.org/CVERecord?id=CVE-2020-0431 https://nvd.nist.gov/vuln/detail/CVE-2020-0431 https://patchwork.kernel.org/project/linux-input/patch/20191207210518.GA181006@dtor-ws/
- collector/redhat-cve
- agent/type
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-0431
- agent/references
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/google
- canonical/google android
- vendor/opensuse
- canonical/opensuse
- version/opensuse/15.1
- version/opensuse/15.2