The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headers | Jun 17, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-devel | Sep 28, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 3, 2020 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-source | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-rt_debugUpgrade reiserfs-kmp-rt_debugUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-extraUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade cluster-md-kmp-rt_debugUpgrade kselftests-kmp-rt_debugUpgrade kernel-defaultUpgrade kernel-docsUpgrade gfs2-kmp-rt_debugUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-hweUpgrade linux-gke-5.0Upgrade linux-gcpUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-lts-xenialUpgrade linux-oem-osp1Upgrade linux-azureUpgrade linux-gke-4.15Upgrade linux-oemUpgrade linux-gcp-5.3Upgrade linux-raspi2-5.3Upgrade linux-snapdragonUpgrade linux-awsUpgrade linux-azure-5.3Upgrade linux-gke-5.3Upgrade linux-aws-hweUpgrade linux-raspi2 | Nov 19, 2024 | May 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub