CVE-2020-25221
- State
- Published
- Severity
- Not scored
- Published
- Sep 10, 2020
- Updated
- Aug 4, 2024
- Reserved
- Sep 10, 2020
Description
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.openwall.com/lists/oss-security/2020/09/08/4
- https://git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2
- https://git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73a
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7
- [oss-security] 20200910 Re: CVE Request: Linux kernel vsyscall page refcounting errormailing-list
- https://security.netapp.com/advisory/ntap-20201001-0003/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.