Out-of-bounds read in Linux kernel - CVE-2020-9383

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU25813

Out-of-bounds read in Linux kernel - CVE-2020-9383

Published: March 8, 2020


Vulnerability identifier: #VU25813
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-9383
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the set_fdc() function in drivers/block/floppy.c file in Linux kernel due to the FDC index is not checked for errors before assigning it. A local user can use a specially crafted application to trigger out-of-bounds read error and read contents of memory on the system.


Affected software

Linux kernel
Arch Linux
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Workstation
Slackware Linux
Ubuntu
Opensuse
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-lts-xenial (Ubuntu package)
linux-aws (Ubuntu package)
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oem (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws-hwe (Ubuntu package)
linux-oem-osp1 (Ubuntu package)
linux-gke-5.0 (Ubuntu package)
linux-oracle-5.3 (Ubuntu package)
linux-gcp-5.3 (Ubuntu package)
linux-azure-5.3 (Ubuntu package)
linux-gke-5.3 (Ubuntu package)
linux-raspi2-5.3 (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-alt (Red Hat package)
linux-4.4.217/kernel-generic
linux-4.4.217/kernel-huge
linux-4.4.217/kernel-modules
linux-4.4.217/kernel-headers

How to mitigate CVE-2020-9383

Install updates from vendor's website.

Linux kernel - update to 5.5.7
linux (Ubuntu package) - addressed in versions 4.4.0-178.208, 4.15.0-99.100, 5.3.0-51.44
linux-raspi2 (Ubuntu package) - addressed in versions 4.4.0-1132.141, 4.15.0-1061.65
linux-lts-xenial (Ubuntu package) - update to 4.4.0-178.208~14.04.1
linux-aws (Ubuntu package) - addressed in versions 4.4.0-1066.70, 4.4.0-1106.117, 4.15.0-1066.70, 5.3.0-1017.18
linux-kvm (Ubuntu package) - addressed in versions 4.4.0-1070.77, 4.15.0-1059.60, 5.3.0-1016.17
linux-snapdragon (Ubuntu package) - addressed in versions 4.4.0-1136.144, 4.15.0-1077.84
linux-hwe (Ubuntu package) - addressed in versions 4.15.0-99.100~16.04.1, 5.3.0-51.44~18.04.2
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1061.65, 5.3.0-1018.19
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1082.92~16.04.1, 5.3.0-1020.21
linux-oem (Ubuntu package) - update to 4.15.0-1080.90
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1038.42~16.04.1, 4.15.0-1038.42, 5.3.0-1016.18
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1058.61
linux-aws-hwe (Ubuntu package) - update to 4.15.0-1066.70~16.04.1
linux-oem-osp1 (Ubuntu package) - update to 5.0.0-1050.55
linux-gke-5.0 (Ubuntu package) - update to 5.0.0-1035.36
linux-oracle-5.3 (Ubuntu package) - update to 5.3.0-1016.18~18.04.1
linux-gcp-5.3 (Ubuntu package) - update to 5.3.0-1018.19~18.04.1
linux-azure-5.3 (Ubuntu package) - update to 5.3.0-1020.21~18.04.1
linux-gke-5.3 (Ubuntu package) - update to 5.3.0-1018.19~18.04.1
linux-raspi2-5.3 (Ubuntu package) - update to 5.3.0-1023.25~18.04.1
kernel (Red Hat package) - update to 3.10.0-1160.el7
kernel-rt (Red Hat package) - update to 3.10.0-1160.rt56.1131.el7
kernel-alt (Red Hat package) - update to 4.14.0-115.21.2.el7a
linux-4.4.217/kernel-generic - update to 4.4.217
linux-4.4.217/kernel-huge - update to 4.4.217
linux-4.4.217/kernel-modules - update to 4.4.217
linux-4.4.217/kernel-headers - update to 4.4.217_smp

External References

Related Security Bulletins