CVE-2020-10757 (NVD)

2020-06-09

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Products Ubuntu_linux, Debian_linux, Fedora, Linux_kernel, Active_iq_unified_manager, Cloud_backup, Steelstore_cloud_integrated_storage, Leap, Enterprise_linux, Enterprise_mrg
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
First patch - None (likely due to unavailable code)
Patches https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af5700f9
Links • https://usn.ubuntu.com/4483-1/
• https://www.openwall.com/lists/oss-security/2020/06/04/4
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
• https://usn.ubuntu.com/4426-1/
• https://bugzilla.redhat.com/show_bug.cgi?id=1842525