The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Jun 17, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Sep 28, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade python-perf | Jun 3, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2020 |
| Suse | — | Upgrade reiserfs-kmp-rt_debugUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rt_debugUpgrade dlm-kmp-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rt_debugUpgrade kernel-default-extraUpgrade gfs2-kmp-rt_debugUpgrade kernel-docsUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-extraUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rt_debugUpgrade kernel-rt_debugUpgrade kernel-default | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-gke-5.0Upgrade linux-fipsUpgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-gke-5.3Upgrade linux-awsUpgrade linux-oem-osp1Upgrade linux-gcp-5.3Upgrade linux-oemUpgrade linux-raspi2-5.3Upgrade linux-lts-xenialUpgrade linux-gke-4.15Upgrade linux-azure-5.3Upgrade linux-snapdragonUpgrade linux-raspi2Upgrade linux-azure | Nov 19, 2024 | May 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub