The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 17, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | Sep 28, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Jun 3, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2020 |
| Suse | — | Upgrade ocfs2-kmp-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rt_debugUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rt_debugUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade gfs2-kmp-rt_debugUpgrade cluster-md-kmp-rt_debugUpgrade kernel-docsUpgrade kernel-rt_debug-extraUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-rt | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-lts-xenialUpgrade linux-aws-hweUpgrade linux-gke-5.3Upgrade linux-azureUpgrade linux-raspi2-5.3Upgrade linux-snapdragonUpgrade linux-awsUpgrade linux-oemUpgrade linux-gcp-5.3Upgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-azure-5.3Upgrade linux-fipsUpgrade linux-azure-fde-5.15Upgrade linux-gke-5.0Upgrade linuxUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-hweUpgrade linux-azure-fips | Nov 19, 2024 | May 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub