CVE-2020-12769: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and dwspitransferone, aka CID-19b61392c5a8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.4.17
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12769?
CVE-2020-12769 has a severity rating that allows attackers to cause system panic under specific conditions.
How do I fix CVE-2020-12769?
To fix CVE-2020-12769, upgrade to a version of the Linux kernel that is 5.4.17 or newer.
Which Linux distributions are affected by CVE-2020-12769?
CVE-2020-12769 affects various Linux distributions including Debian 8.0, Ubuntu 14.04 and 16.04, and openSUSE Leap versions 15.1 and 15.2.
What components of the Linux kernel are involved in CVE-2020-12769?
CVE-2020-12769 involves the SPI driver implementation in the Linux kernel, specifically the dw_spi_irq and dw_spi_transfer_one functions.
When was CVE-2020-12769 last updated?
CVE-2020-12769 was last updated on 29 November 2024.