CVE-2020-12659: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out-of-bounds write (by a user with the CAPNETADMIN capability) because of a lack of headroom validation.
Other sources
An out-of-bounds (OOB) memory access flaw was found in the Network XDP (the eXpress Data Path) module in the Linux kernel's xdpumemreg function in net/xdp/xdpumem.c. When a user with special user privilege of CAPNETADMIN (or root) calls setsockopt to register umem ring on XDP socket, passing the headroom value larger than the available space in the chunk, it leads to an out-of-bounds write, causing panic or possible memory corruption. This flaw may lead to privilege escalation if a local end-user is granted permission to influence the execution of code in this manner.
An out-of-bounds (OOB) memory access flaw was found in the Network XDP (the eXpress Data Path) module in the Linux kernel's xdpumemreg in net/xdp/xdpumem.c. When a user with special user privilege of CAPNETADMIN (or root) calls setsockopt to register umem ring on XDP socket, passing the headroom value larger than the available space in the chunk can leads to an out of bound write causing a panic or possible memory corruption. This may lead to privilege escalation if a local end user is granted permissions to influence the execution of code in this manner.
Reference: https://bugzilla.kernel.org/showbug.cgi?id=207225 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-240.rt7.54.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-240.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.6.7 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-12659?
CVE-2020-12659 is classified as a high severity vulnerability due to the potential for unauthorized out-of-bounds writes.
How do I fix CVE-2020-12659?
To resolve CVE-2020-12659, upgrade to at least kernel version 5.6.7 or the relevant patched versions provided by your distribution.
Which Linux kernel versions are affected by CVE-2020-12659?
CVE-2020-12659 affects Linux kernel versions prior to 5.6.7, including versions 4.18.x and 4.19.x.
What components are impacted by CVE-2020-12659?
CVE-2020-12659 specifically affects the Network XDP subsystem within the Linux kernel.
Is user privilege required to exploit CVE-2020-12659?
Yes, exploitation of CVE-2020-12659 requires CAP_NET_ADMIN capabilities.