NetSight
IP …
medium5.9

CVE-2020-10711

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7.

Impact

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.7
Redhat3scale
Version 2.0
RedhatOpenstack
Version 13
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0
RedhatEnterprise Linux Aus
Version 7.4
RedhatEnterprise Linux Server Tus
Version 7.4
RedhatMessaging Realtime Grid
Version 2.0
DebianDebian Linux
Versions 8.0, 9.0, 10.0
OpensuseLeap
Versions 15.1, 15.2
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10, 20.04

Weakness classification

CWE-476

References