UBUNTU-CVE-2020-11884

Description

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

CVSS Metrics

• v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• ubuntu•linux

  < 4.15.0-99.100 | < 5.4.0-28.32

• ubuntu•linux-aws-5.3

  < 5.3.0-1019.21~18.04.1

• ubuntu•linux-aws-fips

  < 4.15.0-2018.18 | all

• ubuntu•linux-azure-4.15

  < 4.15.0-1083.93

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fips

  < 4.15.0-2006.7 | all

• ubuntu•linux-bluefield

  all

• ubuntu•linux-fips

  < 4.15.0-1029.34

• ubuntu•linux-gcp-fips

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-hwe

  < 4.15.0-99.100~16.04.1 | < 5.3.0-51.44~18.04.2

• ubuntu•linux-hwe-edge

  all | all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-nvidia

  all

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all

References (5)

• https://ubuntu.com/security/CVE-2020-11884
• https://ubuntu.com/security/notices/USN-4342-1
• https://ubuntu.com/security/notices/USN-4343-1
• https://ubuntu.com/security/notices/USN-4345-1
• https://www.cve.org/CVERecord?id=CVE-2020-11884