CVE-2020-10732
First published: Fri May 01 2020(Updated: )
A flaw was found in the Linux kernel implementation of userspace core dumps. This flaw allows anyone with access to core dumps to see a small amount of private kernel data about the current running kernels internal state which could be used to further allow an attack to more reliably execute. This information could be user processes or kernel state from previous executions. References: <a href="https://github.com/google/kmsan/issues/76">https://github.com/google/kmsan/issues/76</a> <a href="https://twitter.com/grsecurity/status/1252558055629299712">https://twitter.com/grsecurity/status/1252558055629299712</a> <a href="https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a">https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:3.10.0-1160.rt56.1131.el7 | 0:3.10.0-1160.rt56.1131.el7 |
| redhat/kernel | <0:3.10.0-1160.el7 | 0:3.10.0-1160.el7 |
| redhat/kernel-rt | <0:4.18.0-240.rt7.54.el8 | 0:4.18.0-240.rt7.54.el8 |
| redhat/kernel | <0:4.18.0-240.el8 | 0:4.18.0-240.el8 |
| Linux Kernel | <3.16.85 | |
| Linux Kernel | >=4.4<4.4.226 | |
| Linux Kernel | >=4.9<4.9.226 | |
| Linux Kernel | >=4.14<4.14.183 | |
| Linux Kernel | >=4.19<4.19.126 | |
| Linux Kernel | >=5.4<5.4.44 | |
| Linux Kernel | >=5.6<5.6.16 | |
| openSUSE | =15.1 | |
| openSUSE | =15.2 | |
| Ubuntu Linux | =14.04 | |
| Ubuntu Linux | =16.04 | |
| Ubuntu Linux | =18.04 | |
| Ubuntu Linux | =20.04 | |
| NetApp Active IQ Unified Manager for VMware vSphere | >=9.5 | |
| netapp hci management node | ||
| netapp solidfire | ||
| NetApp SteelStore | ||
| All of | ||
| NetApp AFF A700 Firmware | ||
| NetApp AFF A700 | ||
| All of | ||
| netapp h410c firmware | ||
| netapp h410c | ||
| All of | ||
| netapp h300s firmware | ||
| netapp h300s | ||
| All of | ||
| NetApp H500S Firmware | ||
| netapp h500s | ||
| All of | ||
| netapp h700s firmware | ||
| netapp h700s | ||
| All of | ||
| netapp h300e firmware | ||
| netapp h300e | ||
| All of | ||
| netapp h500e firmware | ||
| netapp h500e | ||
| All of | ||
| netapp h700e firmware | ||
| netapp h700e | ||
| All of | ||
| netapp h410s firmware | ||
| netapp h410s | ||
| All of | ||
| NetApp AFF 8300 Firmware | ||
| NetApp AFF 8300 | ||
| All of | ||
| NetApp AFF 8700 | ||
| NetApp AFF 8700 | ||
| All of | ||
| NetApp AFF A400 | ||
| NetApp AFF A400 | ||
| debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.13-1 | |
| Android | ||
| Ubuntu | =14.04 | |
| Ubuntu | =16.04 | |
| Ubuntu | =18.04 | |
| Ubuntu | =20.04 | |
| NetApp AFF A700 Firmware | ||
| NetApp AFF A700 | ||
| netapp h410c firmware | ||
| netapp h410c | ||
| netapp h300s firmware | ||
| netapp h300s | ||
| NetApp H500S Firmware | ||
| netapp h500s | ||
| netapp h700s firmware | ||
| netapp h700s | ||
| netapp h300e firmware | ||
| netapp h300e | ||
| netapp h500e firmware | ||
| netapp h500e | ||
| netapp h700e firmware | ||
| netapp h700e | ||
| netapp h410s firmware | ||
| netapp h410s | ||
| NetApp AFF 8300 Firmware | ||
| NetApp AFF 8300 | ||
| NetApp AFF 8700 | ||
| NetApp AFF 8700 | ||
| NetApp AFF A400 | ||
| NetApp AFF A400 |
Remedy
Possible mitigation would be to disable core dumps system-wide by setting: * hard core 0 In the /etc/security/limits.conf file and restarting applications/services/processes which users may have access to or simply reboot the system. This disables core dumps which may not be a suitable workaround in your environment.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2020-10732 https://nvd.nist.gov/vuln/detail/CVE-2020-10732
- https://bugzilla.redhat.com/show_bug.cgi?id=1831399
- https://access.redhat.com/errata/RHSA-2020:4062
- https://access.redhat.com/errata/RHSA-2020:4060
- https://access.redhat.com/errata/RHSA-2020:4609
- https://access.redhat.com/errata/RHSA-2020:4431
- https://access.redhat.com/security/cve/cve-2020-10732
- https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d
- https://github.com/google/kmsan/issues/76
- https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
- https://twitter.com/grsecurity/status/1252558055629299712
- https://usn.ubuntu.com/4411-1/
- https://usn.ubuntu.com/4427-1/
- https://usn.ubuntu.com/4439-1/
- https://usn.ubuntu.com/4440-1/
- https://usn.ubuntu.com/4485-1/
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732
- https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/
- https://security.netapp.com/advisory/ntap-20210129-0005/
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
- https://launchpad.net/bugs/cve/CVE-2020-10732
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1832059
- http://android.googlesource.com/kernel/common/+/1d605416fb7175e1adf094251466caa52093b413
- https://source.android.com/docs/security/bulletin/2021-01-01 (Advisory)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10732
- https://nvd.nist.gov/vuln/detail/CVE-2020-10732
- https://security-tracker.debian.org/tracker/CVE-2020-10732
- https://ubuntu.com/security/CVE-2020-10732
- https://www.openwall.com/lists/oss-security/2020/05/06/1
- https://git.kernel.org/linus/1d605416fb7175e1adf094251466caa52093b413
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is the severity of CVE-2020-10732?
The severity of CVE-2020-10732 is classified as medium, impacting the confidentiality of kernel data in core dumps.
How do I fix CVE-2020-10732?
To fix CVE-2020-10732, upgrade to the recommended versions of the kernel provided by your OS vendor.
Who is affected by CVE-2020-10732?
CVE-2020-10732 affects various versions of the Linux kernel, particularly those prior to the fixed versions released by vendors.
What impact does CVE-2020-10732 have on system security?
CVE-2020-10732 can allow unauthorized access to sensitive kernel data, potentially leading to further exploits.
Is there a workaround for CVE-2020-10732?
There are no specific workarounds for CVE-2020-10732; the best mitigation is to apply the appropriate kernel updates.
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-10732
- agent/severity
- agent/weakness
- agent/remedy
- agent/references
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/last-modified-date
- agent/trending
- agent/source
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- agent/author
- collector/security-tracker-debian
- source/Debian
- collector/android-source
- source/Android
- agent/tags
- collector/nvd-index
- agent/softwarecombine
- package-manager/redhat
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.4
- version/linux kernel/4.9
- version/linux kernel/4.14
- version/linux kernel/4.19
- version/linux kernel/5.4
- version/linux kernel/5.6
- vendor/opensuse
- canonical/opensuse
- version/opensuse/15.1
- version/opensuse/15.2
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/14.04
- version/ubuntu linux/16.04
- version/ubuntu linux/18.04
- version/ubuntu linux/20.04
- vendor/netapp
- canonical/netapp active iq unified manager for vmware vsphere
- version/netapp active iq unified manager for vmware vsphere/9.5
- canonical/netapp hci management node
- canonical/netapp solidfire
- canonical/netapp steelstore
- canonical/netapp aff a700 firmware
- canonical/netapp aff a700
- canonical/netapp h410c firmware
- canonical/netapp h410c
- canonical/netapp h300s firmware
- canonical/netapp h300s
- canonical/netapp h500s firmware
- canonical/netapp h500s
- canonical/netapp h700s firmware
- canonical/netapp h700s
- canonical/netapp h300e firmware
- canonical/netapp h300e
- canonical/netapp h500e firmware
- canonical/netapp h500e
- canonical/netapp h700e firmware
- canonical/netapp h700e
- canonical/netapp h410s firmware
- canonical/netapp h410s
- canonical/netapp aff 8300 firmware
- canonical/netapp aff 8300
- canonical/netapp aff 8700
- canonical/netapp aff a400
- package-manager/debian
- vendor/google
- canonical/android
- canonical/ubuntu
- version/ubuntu/14.04
- version/ubuntu/16.04
- version/ubuntu/18.04
- version/ubuntu/20.04