In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | May 13, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perf | May 27, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 5, 2022 | Apr 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2020 |
| Redhat_linux | — | Upgrade kernel | May 13, 2020 | Apr 29, 2020 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Apr 28, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-99-genericUpgrade linux-image-5.3.0-1018-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1058-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1080-oemUpgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.3.0-51-generic-lpaeUpgrade linux-image-5.3.0-1016-oracleUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-4.15.0-99-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-28-lowlatencyUpgrade linux-image-4.15.0-99-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.3Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1038-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-28-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1066-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-51-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-51-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-51-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1059-kvmUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1077-snapdragonUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.3.0-1018-gcpUpgrade linux-image-5.4.0-28-genericUpgrade linux-image-4.15.0-1061-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1061-raspi2Upgrade linux-image-5.3.0-1017-awsUpgrade linux-image-5.3.0-1023-raspi2Upgrade linux-image-5.3.0-1020-azureUpgrade linux-image-4.15.0-1082-azureUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1016-kvm | Apr 29, 2020 | Apr 28, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub