The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Jun 17, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Sep 28, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Jun 3, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kselftests-kmp-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade cluster-md-kmp-rt_debugUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rt_debugUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rt_debugUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rt_debugUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rt_debug | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-lts-xenialUpgrade linux-aws-hweUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-raspi2-5.3Upgrade linux-oemUpgrade linux-azure-5.3Upgrade linux-azureUpgrade linux-raspi2Upgrade linux-awsUpgrade linux-gke-5.3Upgrade linux-gcp-5.3Upgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linuxUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-gke-5.0 | Nov 19, 2024 | May 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub