CVE-2020-12362: Integer Overflow

Q: What is CVE-2020-12362?

CVE-2020-12362 is an integer overflow vulnerability in the firmware for some Intel(R) Graphics Drivers for Windows.

Q: What is the severity of CVE-2020-12362?

CVE-2020-12362 has a severity rating of 7.8 (high).

Q: How does CVE-2020-12362 affect data confidentiality and integrity?

CVE-2020-12362 poses a threat to both data confidentiality and integrity.

Q: What is the remedy for CVE-2020-12362?

To fix CVE-2020-12362, update the affected Intel(R) Graphics Drivers to version 26.20.100.7212 or newer.

Q: Where can I find more information about CVE-2020-12362?

You can find more information about CVE-2020-12362 in the advisory published by Intel and the bugzilla report.

Published Feb 17, 2021

Updated

A flaw was found in the Linux kernel. An integer overflow in the firmware for some Intel(R) Graphics Drivers may allow a privileged user to potentially enable an escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Other sources

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.

Affected Software

16 affected componentsFixes available

redhat/kernel<0:2.6.32-754.41.2.el6

0:2.6.32-754.41.2.el6

redhat/kernel-rt<0:3.10.0-1160.31.1.rt56.1169.el7

0:3.10.0-1160.31.1.rt56.1169.el7

redhat/kernel<0:3.10.0-1160.31.1.el7

0:3.10.0-1160.31.1.el7

redhat/kernel<0:3.10.0-514.89.1.el7

0:3.10.0-514.89.1.el7

redhat/kernel<0:3.10.0-693.87.1.el7

0:3.10.0-693.87.1.el7

redhat/kernel<0:3.10.0-957.76.1.el7

0:3.10.0-957.76.1.el7

redhat/kernel<0:3.10.0-1062.51.1.el7

0:3.10.0-1062.51.1.el7

redhat/kernel-rt<0:4.18.0-305.rt7.72.el8

0:4.18.0-305.rt7.72.el8

redhat/kernel<0:4.18.0-305.el8

0:4.18.0-305.el8

redhat/linux-firmware<0:20201218-102.git05789708.el8

0:20201218-102.git05789708.el8

redhat/kernel<0:4.18.0-147.48.1.el8_1

0:4.18.0-147.48.1.el8_1

redhat/kernel-rt<0:4.18.0-193.56.1.rt13.106.el8_2

0:4.18.0-193.56.1.rt13.106.el8_2

redhat/kernel<0:4.18.0-193.56.1.el8_2

0:4.18.0-193.56.1.el8_2

Intel Graphics Drivers Windows<26.20.100.7212

Intel Graphics Drivers<26.20.100.7212

Linux Linux kernel<5.5

Remediation

Information

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example.

Event History

Feb 17, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Feb 18, 2021

Data Sourced

via Red Hat·03:05 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is CVE-2020-12362?