CVE-2020-10732: Medium severity Linux Linux kernel vulnerability
A flaw was found in the Linux kernel implementation of userspace core dumps. This flaw allows anyone with access to core dumps to see a small amount of private kernel data about the current running kernels internal state which could be used to further allow an attack to more reliably execute. This information could be user processes or kernel state from previous executions.
References: https://github.com/google/kmsan/issues/76 https://twitter.com/grsecurity/status/1252558055629299712 https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
Other sources
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
A flaw was found in the Linux kernel’s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.rt56.1131.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-240.rt7.54.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-240.el8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Configuration
Disable core dumps system-wide by setting the appropriate limits in /etc/security/limits.conf, then restart the affected applications/services/processes (or reboot) for users who may access core dumps.
Linux (core dumps) core dumps system-wide (via /etc/security/limits.conf) = disable
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-10732?
The severity of CVE-2020-10732 is classified as medium, impacting the confidentiality of kernel data in core dumps.
How do I fix CVE-2020-10732?
To fix CVE-2020-10732, upgrade to the recommended versions of the kernel provided by your OS vendor.
Who is affected by CVE-2020-10732?
CVE-2020-10732 affects various versions of the Linux kernel, particularly those prior to the fixed versions released by vendors.
What impact does CVE-2020-10732 have on system security?
CVE-2020-10732 can allow unauthorized access to sensitive kernel data, potentially leading to further exploits.
Is there a workaround for CVE-2020-10732?
There are no specific workarounds for CVE-2020-10732; the best mitigation is to apply the appropriate kernel updates.