CVE-2020-36310: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a setmemoryregiontest infinite loop for certain nested page faults, aka CID-e72436bc3a52.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36310?
The severity of CVE-2020-36310 is medium with a severity value of 5.5.
What is the affected software for CVE-2020-36310?
The affected software for CVE-2020-36310 includes Linux kernel versions before 5.8 and Debian Linux version 11.0.
How does CVE-2020-36310 impact Linux kernel?
CVE-2020-36310 allows an infinite loop in set_memory_region_test for certain nested page faults in the Linux kernel before 5.8.
How can I fix CVE-2020-36310 on my Linux kernel?
To fix CVE-2020-36310 on your Linux kernel, update to version 5.8 or later.
Where can I find more information about CVE-2020-36310?
More information about CVE-2020-36310 can be found at the following references: [Git Kernel](https://git.kernel.org/linus/e72436bc3a5206f95bb384e741154166ddb3202e), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2020-36310), [Linux Kernel ChangeLog](https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8).