CVE-2020-12363: Input Validation

Q: What is the severity of CVE-2020-12363?

CVE-2020-12363 has a medium severity level due to potential denial of service vulnerabilities.

Q: How do I fix CVE-2020-12363?

To fix CVE-2020-12363, update the affected Intel Graphics Drivers and Linux kernel versions to the latest recommended patches.

Q: Which systems are affected by CVE-2020-12363?

CVE-2020-12363 affects certain versions of Intel Graphics Drivers for Windows and the Linux kernel versions 3.10.x and 4.18.x.

Q: What kind of flaw is described in CVE-2020-12363?

CVE-2020-12363 is characterized by improper input validation within Intel Graphics Drivers.

Q: Is local access required to exploit CVE-2020-12363?

Yes, a privileged user with local access is required to potentially exploit CVE-2020-12363.

Published Feb 17, 2021

Updated

A flaw was found in the Linux kernel. Improper input validation in some Intel(R) Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access.

Other sources

Improper input validation in some Intel(R) Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.

Affected Software

8 affected componentsFixes available

redhat/kernel-rt<0:3.10.0-1160.31.1.rt56.1169.el7

0:3.10.0-1160.31.1.rt56.1169.el7

redhat/kernel<0:3.10.0-1160.31.1.el7

0:3.10.0-1160.31.1.el7

redhat/kernel-rt<0:4.18.0-305.rt7.72.el8

0:4.18.0-305.rt7.72.el8

redhat/kernel<0:4.18.0-305.el8

0:4.18.0-305.el8

redhat/linux-firmware<0:20201218-102.git05789708.el8

0:20201218-102.git05789708.el8

Intel Graphics Drivers Windows<26.20.100.7212

Intel Graphics Drivers<26.20.100.7212

Linux Linux kernel<5.5

Remediation

Information

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Event History

Feb 17, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Feb 18, 2021

Data Sourced

via Red Hat·03:09 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2020-12363?