CVE-2020-29534: High severity Linux Linux kernel vulnerability
Published Dec 3, 2020
·Updated
An issue was discovered in the Linux kernel before 5.9.3. iouring takes a non-refcounted reference to the filesstruct of the process that submitted a request, causing execve() to incorrectly optimize unsharefd(), aka CID-0f2122045b94.
Affected Software
3 affected components
Linux Linux kernel>=5.1<5.8.18
Linux Linux kernel>=5.9.0<5.9.3
Linux Linux kernel=5.10-rc1
Remediation
Patch Available
Event History
Dec 3, 2020
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is CVE-2020-29534?
CVE-2020-29534 is a vulnerability in the Linux kernel before version 5.9.3 that allows for incorrect optimization of unshare_fd() in execve().
2
How severe is CVE-2020-29534?
CVE-2020-29534 has a severity rating of 7.8 (High).
3
Which software versions are affected by CVE-2020-29534?
Linux kernel versions between 5.1 and 5.8.18, and versions between 5.9.0 and 5.9.3 are affected by CVE-2020-29534.
4
How can I fix CVE-2020-29534?
Update your Linux kernel to version 5.9.3 or newer to fix CVE-2020-29534.
5
Where can I find more information about CVE-2020-29534?
You can find more information about CVE-2020-29534 at the following references: [link1], [link2], [link3].