openEuler 20.03 LTS update for kernel



| Updated: 2025-04-24
Risk Medium
Patch available YES
Number of vulnerabilities 8
CVE-ID CVE-2020-25704
CVE-2020-28974
CVE-2020-29371
CVE-2020-28915
CVE-2020-25705
CVE-2020-29370
CVE-2020-29368
CVE-2020-28941
CWE-ID CWE-401
CWE-125
CWE-126
CWE-330
CWE-362
CWE-787
CWE-763
Exploitation vector Network
Public exploit Public exploit code for vulnerability #5 is available.
Vulnerable software
 openEuler
Operating systems & Components / Operating system

perf
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

python2-perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

python2-perf
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 8 vulnerabilities.

1) Memory leak

EUVDB-ID: #VU55258

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-25704

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the Linux kernel performance monitoring subsystem when using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU90369

Risk: Medium

CVSSv4.0: 1.8 [CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-28974

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local privileged user to read and manipulate data.

The vulnerability exists due to an out-of-bounds read error within the con_font_default() and con_font_op() functions in drivers/tty/vt/vt.c. A local privileged user can read and manipulate data.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Memory leak

EUVDB-ID: #VU90488

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-29371

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to memory leak within the romfs_dev_read() function in fs/romfs/storage.c. A local user can gain access to sensitive information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Buffer Over-read

EUVDB-ID: #VU64793

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-28915

CWE-ID: CWE-126 - Buffer over-read

Exploit availability: No

Description

The vulnerability allows a local user with physical access to perform a denial of service attack.

The vulnerability exists due to an out-of-bounds (OOB) memory access flaw in fbcon_get_font() function in drivers/video/fbdev/core/fbcon.c in fbcon driver module in the Linux kernel. A local user with special user privilege and with physical access can gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use of insufficiently random values

EUVDB-ID: #VU49150

Risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2020-25705

CWE-ID: CWE-330 - Use of Insufficiently Random Values

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

6) Concurrent execution using shared resource with improper synchronization ('race condition')

EUVDB-ID: #VU92421

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-29370

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to concurrent execution using shared resource with improper synchronization ('race condition') error within the kmem_cache_alloc_bulk() function in mm/slub.c. A local user can execute arbitrary code.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds write

EUVDB-ID: #VU51549

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-29368

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing untrusted input within the __split_huge_pmd() function in mm/huge_memory.c in the Linux kernel. A local user can abuse the copy-on-write implementation and gain unintended write access because of a race condition in a THP mapcount check.


Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Release of invalid pointer or reference

EUVDB-ID: #VU92422

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-28941

CWE-ID: CWE-763 - Release of invalid pointer or reference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to release of invalid pointer or reference error within the makefile. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS

perf: before 4.19.90-2012.5.0.0054

kernel-source: before 4.19.90-2012.5.0.0054

python2-perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools-debuginfo: before 4.19.90-2012.5.0.0054

kernel-devel: before 4.19.90-2012.5.0.0054

kernel-tools-devel: before 4.19.90-2012.5.0.0054

bpftool-debuginfo: before 4.19.90-2012.5.0.0054

python3-perf: before 4.19.90-2012.5.0.0054

python2-perf: before 4.19.90-2012.5.0.0054

python3-perf-debuginfo: before 4.19.90-2012.5.0.0054

perf-debuginfo: before 4.19.90-2012.5.0.0054

kernel-debuginfo: before 4.19.90-2012.5.0.0054

kernel-tools: before 4.19.90-2012.5.0.0054

kernel-debugsource: before 4.19.90-2012.5.0.0054

bpftool: before 4.19.90-2012.5.0.0054

kernel: before 4.19.90-2012.5.0.0054

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2020-1112


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###