NetSight
IP …
high7.8

CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.

Impact

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.5 before 4.9.227
from 4.10 before 4.14.184
from 4.15 before 4.19.127
from 4.20 before 5.4.45
from 5.5 before 5.6.17
from 5.7 before 5.7.1
OpensuseLeap
Version 15.1
RedhatEnterprise Linux
Versions 7.0, 8.0
RedhatEnterprise Mrg
Version 2.0
FedoraprojectFedora
Version 31
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappSteelstore Cloud Integrated Storage
All versions

Weakness classification

CWE-119CWE-843

References