CVE-2020-12771 Denial of service in n/a
A deadlock in the Linux kernel bcache module allows local attackers to cause a system hang, requiring a kernel patch to resolve.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-12771?
CVE-2020-12771 is a medium-severity denial of service vulnerability in Canonical Ubuntu Linux, published on 9 May 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
Weakness: CWE-667
Which versions are affected by CVE-2020-12771?
It affects 24 products.
Products include Canonical Ubuntu Linux, Debian Debian Linux, Linux kernel, Netapp A700s Firmware, Netapp Active Iq Unified Manager, Netapp Cloud Backup and 18 more.
How do I fix CVE-2020-12771?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-12771 being exploited?
There is no known exploitation of CVE-2020-12771 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2020-12771, GHSA-x72c-34x9-qrm4, UBUNTU-CVE-2020-12771, USN-4462-1.