CVE-2020-10751
- State
- Published
- Severity
- 6.1 Medium
- Published
- May 26, 2020
- Updated
- Aug 4, 2024
- Reserved
- Mar 20, 2020
Description
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
kernelThe Linux Foundation |
|
References
- [oss-security] 20200527 CVE-2020-10751 - Linux kernel: SELinux netlink permission check bypassmailing-list
- [debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security updatemailing-list
- [debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security updatemailing-list
- [debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security updatemailing-list
- DSA-4698vendor-advisory
- DSA-4699vendor-advisory
- openSUSE-SU-2020:0801vendor-advisory
- USN-4389-1vendor-advisory
- USN-4390-1vendor-advisory
- USN-4391-1vendor-advisory
- openSUSE-SU-2020:0935vendor-advisory
- USN-4413-1vendor-advisory
- USN-4412-1vendor-advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10751
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6
- https://www.openwall.com/lists/oss-security/2020/04/30/5
- https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuAPysZD=5hmyO4QisgxCKi4DHU3CfMPSP=yg%40mail.gmail.com/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.