CVE-2020-27152: Medium severity linux kernel vulnerability
A stack overflow flaw via an infinite loop condition issue was found in the KVM hypervisor of the Linux kernel. This flaw occurs while processing interrupts because the IRQ state is erroneously set. This flaw allows a guest user to crash the host kernel, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Other sources
A stack overflow via an infinite loop condition issue was found in the KVM hypervisor of the Linux kernel. It could occur while processing interrupts because irq state is erroneously set. A guest user may use this flaw to crash the host kernel resulting in DoS scenario.
Upstream patch: --------------- -> https://git.kernel.org/linus/77377064c3a94911339f13ce113b3abf265e06da
Reference: ---------- -> https://www.openwall.com/lists/oss-security/2020/11/03/1
— Red Hat
An issue was discovered in ioapiclazyupdateeoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an infinite loop related to improper interaction between a resampler and edge triggering, aka CID-77377064c3a9.
Affected Software
Remediation
Information
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-27152?
CVE-2020-27152 is classified with a high severity rating due to its potential to cause denial of service.
How can I fix CVE-2020-27152?
To fix CVE-2020-27152, update your Linux kernel to version 0:4.18.0-240.22.1.rt7.77.el8_3 or later, or to 5.10.223-1 or later, as recommended.
Which systems are affected by CVE-2020-27152?
CVE-2020-27152 affects various Linux kernel versions, specifically those prior to 5.10.
What impact does CVE-2020-27152 have on system performance?
CVE-2020-27152 can lead to a stack overflow, resulting in the crashing of the host kernel and overall system instability.
Is CVE-2020-27152 remote exploit opportunity?
Yes, CVE-2020-27152 can be exploited by a guest user to crash the host, leading to a denial of service.