CVE-2020-10757: canonical ubuntu_linux
Modified
AliasesSUSE-SU-2020:1764-1SUSE-SU-2020:1781-1RHSA-2020:3598UBUNTU-CVE-2020-10757DEBIAN-CVE-2020-10757
Published 09-06-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-10757 is a high (CVSS 7.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 62.6% of scored vulnerabilities. 1 public exploit is recorded.
Priority
Prioritisepublic exploit
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
0.99%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 40 · Related 28DLA-2242-1DSA-4698-1DSA-4699-1LSN-0069-1MGASA-2020-0333OPENSUSE-SU-2020:0801-1OPENSUSE-SU-2021:0242-1RHSA-2020:3010RHSA-2020:3016RHSA-2020:3041RHSA-2020:3220RHSA-2020:3221RHSA-2020:3222RHSA-2020:3226SUSE-SU-2020:1587-1SUSE-SU-2020:1596-1SUSE-SU-2020:1597-1SUSE-SU-2020:1599-1SUSE-SU-2020:1602-1SUSE-SU-2020:1603-1SUSE-SU-2020:1604-1SUSE-SU-2020:1605-1SUSE-SU-2020:1646-1SUSE-SU-2020:1656-1SUSE-SU-2020:1663-1SUSE-SU-2020:1671-1SUSE-SU-2020:1754-1SUSE-SU-2020:1758-1SUSE-SU-2020:1767-1SUSE-SU-2020:1775-1SUSE-SU-2020:1779-1SUSE-SU-2020:1784-1SUSE-SU-2020:2156-1SUSE-SU-2020:2478-1SUSE-SU-2020:2487-1SUSE-SU-2020:2508-1USN-4426-1USN-4439-1USN-4440-1USN-4483-1
Timeline
- 09-06-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.0–7.8
- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Medium 6.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.99%
Chance of exploitation in the next 30 days
Percentile
63%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.99% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
- CWE-843Access of Resource Using Incompatible TypeThe product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Affected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu45 products
- linux< 4.15.0-112.113 | < 5.4.0-45.49
- linux-aws< 4.15.0-1079.83 | < 5.4.0-1022.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.3< 5.3.0-1032.34~18.04.2
- linux-aws-5.4< 5.4.0-1022.22~18.04.1
Redhat29 products
- enterprise_linuxEOL7.0 | 8.0
- enterprise_mrg2.0
- bpftool< 0:3.10.0-1062.33.1.el7
- bpftool-debuginfo< 0:3.10.0-1062.33.1.el7
- kernel< 0:3.10.0-1062.33.1.el7
Suse8 products
- kgraft-patch-SLE12-SP2_Update_33&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 6-2.1
- kgraft-patch-SLE12-SP2_Update_33&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 6-2.1
- kgraft-patch-SLE12-SP2_Update_34&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 3-2.1
- kgraft-patch-SLE12-SP2_Update_34&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 3-2.1
- kgraft-patch-SLE12-SP3_Update_29&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 6-2.1
Netapp3 products
Debian2 products
- linux< 5.6.14-2
- debian_linuxEOL8.0
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 20.04
Fedoraproject1 product
- fedoraEOL31
Linux1 product
- linux_kernel≥ 4.5, < 4.9.227 | ≥ 4.10, < 4.14.184 | ≥ 4.15, < 4.19.127 | ≥ 4.20, < 5.4.45 | ≥ 5.5, < 5.6.17 | ≥ 5.7, < 5.7.1
Opensuse1 product
- leapEOL15.1
9 vendors · 91 products
References
29 links- www.openwall.com/lists/oss-security/2020/06/04/4X Refsource MISCARTICLEREPORTExploitMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1842525Vendor AdvisoryX Refsource REDHATREPORTIssue TrackingThird Party Advisory
lists.debian.org/debian-lts-announce/2020/06/msg00012.htmlMailing ListX Refsource MLISTThird Party Advisory- lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListPatchThird Party Advisory
