CVE-2020-12364: Null Pointer Dereference

Q: What is the severity of CVE-2020-12364?

CVE-2020-12364 has a severity rating that indicates it may lead to a denial of service for privileged users.

Q: How do I fix CVE-2020-12364?

To fix CVE-2020-12364, update your Intel Graphics Drivers for Windows to version 26.20.100.7212 or later, or apply the relevant kernel updates for Red Hat Enterprise Linux.

Q: Which Intel Graphics Drivers are affected by CVE-2020-12364?

CVE-2020-12364 affects Intel Graphics Drivers for Windows prior to version 26.20.100.7212.

Q: What systems are impacted by CVE-2020-12364?

CVE-2020-12364 impacts certain versions of Intel Graphics Drivers for Windows and specific kernel versions on Red Hat-based systems.

Q: Can CVE-2020-12364 be exploited remotely?

CVE-2020-12364 requires local access to exploit, thereby limiting the scope of potential attack.

Published Feb 17, 2021

Updated

Null pointer reference in some Intel(R) Graphics Drivers for Microsoft Windows and the Linux kernel may allow a privileged user to potentially enable a denial of service via local access.

Other sources

Null pointer reference in some Intel(R) Graphics Drivers for Windows before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.

Affected Software

8 affected componentsFixes available

redhat/kernel-rt<0:3.10.0-1160.31.1.rt56.1169.el7

0:3.10.0-1160.31.1.rt56.1169.el7

redhat/kernel<0:3.10.0-1160.31.1.el7

0:3.10.0-1160.31.1.el7

redhat/kernel-rt<0:4.18.0-305.rt7.72.el8

0:4.18.0-305.rt7.72.el8

redhat/kernel<0:4.18.0-305.el8

0:4.18.0-305.el8

redhat/linux-firmware<0:20201218-102.git05789708.el8

0:20201218-102.git05789708.el8

Intel Graphics Drivers Windows<26.20.100.7212

Intel Graphics Drivers<26.20.100.7212

Linux Linux kernel<5.5

Remediation

Information

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Event History

Feb 17, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Feb 18, 2021

Data Sourced

via Red Hat·03:11 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2020-12364?