CVE-2020-27777
First published: Thu Oct 08 2020(Updated: )
A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <4.14.204 | |
| Linux Linux kernel | >=4.15<4.19.155 | |
| Linux Linux kernel | >=4.20<5.4.75 | |
| Linux Linux kernel | >=5.5<5.9.5 | |
| Redhat Openshift Container Platform | =4.4 | |
| Redhat Openshift Container Platform | =4.5 | |
| Redhat Openshift Container Platform | =4.6 | |
| Redhat Enterprise Linux | =5.0 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| redhat/kernel | <0:3.10.0-1160.41.1.el7 | 0:3.10.0-1160.41.1.el7 |
| redhat/kernel | <0:4.18.0-348.el8 | 0:4.18.0-348.el8 |
| redhat/kernel | <5.10 | 5.10 |
| IBM DRM | <=2.0.6 | |
| debian/linux | 5.10.223-1 6.1.106-3 6.1.99-1 6.10.9-1 |
Remedy
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1900844
- https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764
- https://www.openwall.com/lists/oss-security/2020/10/09/1
- https://www.openwall.com/lists/oss-security/2020/11/23/2
- https://www.cve.org/CVERecord?id=CVE-2020-27777 https://nvd.nist.gov/vuln/detail/CVE-2020-27777 https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764 https://www.openwall.com/lists/oss-security/2020/10/09/1 https://www.openwall.com/lists/oss-security/2020/11/23/2
- https://access.redhat.com/errata/RHSA-2021:3327
- https://access.redhat.com/errata/RHSA-2021:4356
- https://access.redhat.com/security/cve/cve-2020-27777
- https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764
- https://launchpad.net/bugs/cve/CVE-2020-27777
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1900845
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192283
- https://www.ibm.com/support/pages/node/6497499 (Advisory)
- https://git.kernel.org/linus/bd59380c5ba4147dcbaad3e582b55ccfd120b764
- https://security-tracker.debian.org/tracker/CVE-2020-27777
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27777
- https://nvd.nist.gov/vuln/detail/CVE-2020-27777
- https://ubuntu.com/security/CVE-2020-27777
- collector/nvd-api
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-27777
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- agent/description
- agent/references
- collector/ibm-support
- source/IBM
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/4.15
- version/linux linux kernel/4.20
- version/linux linux kernel/5.5
- vendor/redhat
- canonical/redhat openshift container platform
- version/redhat openshift container platform/4.4
- version/redhat openshift container platform/4.5
- version/redhat openshift container platform/4.6
- canonical/redhat enterprise linux
- version/redhat enterprise linux/5.0
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- package-manager/redhat
- vendor/ibm
- canonical/ibm drm
- version/ibm drm/2.0.6
- package-manager/debian