CVE-2020-29368 Race condition in n/a
A race condition in the Linux kernel's copy-on-write implementation allows unintended write access, potentially leading to privilege escalation or data modification.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-29368?
CVE-2020-29368 is a high-severity vulnerability in Linux kernel, published on 28 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.
Weakness: CWE-362
Which versions are affected by CVE-2020-29368?
It affects 7 products.
Linux distribution packages (3)
kgraft-patch-SLE12-SP4_Update_18 SUSE:Linux Enterprise Live Patching 12 SP4 | All versions | 2-2.2 |
kernel-livepatch-SLE15_Update_22 SUSE:Linux Enterprise Live Patching 15 | All versions | 2-2.2 |
kernel-livepatch-SLE15-SP1_Update_22 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 2-2.2 |
Products include Linux kernel, Netapp Cloud Backup, Netapp Element Software, Netapp H410c Firmware, Netapp Hci Bootstrap Os, Netapp Hci Management Node and 1 more.
How do I fix CVE-2020-29368?
Apply the vendor's patch.
Is CVE-2020-29368 being exploited?
There is no known exploitation of CVE-2020-29368 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as A-174738029, ASB-A-174738029, DEBIAN-CVE-2020-29368, GHSA-wr2j-q648-w99g, SUSE-SU-2021:0864-1, UBUNTU-CVE-2020-29368.