CVE-2020-25211: Buffer Overflow
A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Other sources
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c, aka CID-1cc5ef91d2ff.
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c.
References:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6 https://twitter.com/grsecurity/status/1303646421158109185
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-25211?
CVE-2020-25211 has been classified with a high severity level due to its potential to cause crashes and trigger incorrect protocol numbers.
How do I fix CVE-2020-25211?
To mitigate CVE-2020-25211, update your Linux kernel to the patched versions specified in the security advisories of your distribution.
What systems are affected by CVE-2020-25211?
CVE-2020-25211 affects various versions of the Linux kernel across multiple distributions including Red Hat, Debian, and Fedora.
Is CVE-2020-25211 exploited in the wild?
As of the current date, there are no confirmed reports of CVE-2020-25211 being actively exploited in the wild.
What type of vulnerability is CVE-2020-25211?
CVE-2020-25211 is a local buffer overflow vulnerability in the Linux kernel's conntrack netlink configuration.