NetSight
IP …
high7.0

CVE-2020-11884

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uacce…

Impact

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 4.19.119
from 4.20 before 5.4.36
from 5.5 before 5.6.8
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.10, 20.04
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 30, 31, 32
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappElement Software
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappSolidfire Baseboard Management Controller
All versions
NetappBootstrap Os
All versions

Weakness classification

CWE-362

References