The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Jun 17, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf | Sep 28, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Jun 3, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perf | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2020 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rt_debugUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-rt_debugUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade dlm-kmp-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rt_debugUpgrade kernel-docsUpgrade gfs2-kmp-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-extraUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-rt_debugUpgrade kernel-default | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-gke-5.0Upgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azure-5.3Upgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-azureUpgrade linux-lts-xenialUpgrade linux-gke-4.15Upgrade linux-awsUpgrade linux-raspi2-5.3Upgrade linux-gcp-5.3Upgrade linux-oemUpgrade linux-raspi2Upgrade linux-oem-osp1Upgrade linux-gke-5.3 | Nov 19, 2024 | May 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub