CVE-2020-29534 Race condition in n/a
A race condition in the Linux kernel io_uring subsystem allows local attackers to escalate privileges or execute code via improper file structure reference handling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-29534?
CVE-2020-29534 is a high-severity vulnerability in Linux kernel, published on 3 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd(), aka CID-0f2122045b94.
Which versions are affected by CVE-2020-29534?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2020-29534?
Apply the vendor's patch.
Is CVE-2020-29534 being exploited?
There is no known exploitation of CVE-2020-29534 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2020-29534, GHSA-6pj8-q9pf-wvp7, UBUNTU-CVE-2020-29534.