CVE-2020-12652: Race Condition
The mptctlioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
Who can realistically exploit this issue?
Exploitation requires local access and high privileges. The affected ioctl operations are privileged, and the vendor notes that root already has substantial destructive capability.
Which kernel versions are affected?
Linux kernel versions before 5.4.14 are affected. The issue is fixed in 5.4.14.
What is the impact of a successful race?
A local privileged user can trigger a race condition during the ioctl operation that can cause a denial of service. The supplied CVSS vector indicates no confidentiality or integrity impact, with availability impact rated high.