UBUNTU-CVE-2020-14386
Vulnerability Summary
Timeline
Description
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- ubuntu•linux
< 4.15.0-117.118 | < 5.4.0-47.51
- ubuntu•linux-aws
< 4.15.0-1082.86 | < 5.4.0-1024.24
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.3
< 5.3.0-1035.37
- ubuntu•linux-aws-5.4
< 5.4.0-1024.24~18.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2026.26 | all | < 5.4.0-1069.73+fips2
- ubuntu•linux-aws-hwe
< 4.15.0-1082.86~16.04.1
- ubuntu•linux-azure
< 4.15.0-1095.105~14.04.1 | < 4.15.0-1095.105~16.04.1 | all | < 5.4.0-1025.25
- ubuntu•linux-azure-4.15
< 4.15.0-1095.105
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1025.25~18.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fips
< 4.15.0-2008.9 | all | < 5.4.0-1073.76+fips1
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.15.0-1040.45 | all
- ubuntu•linux-gcp
< 4.15.0-1083.94~16.04.1 | all | < 5.4.0-1024.24
- ubuntu•linux-gcp-4.15
< 4.15.0-1083.94
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1024.24~18.04.1
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
all | < 5.4.0-1067.71~20.04.1
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
< 4.15.0-1069.72
- ubuntu•linux-gke-5.0
< 5.0.0-1047.48
- ubuntu•linux-gke-5.3
< 5.3.0-1036.38
- ubuntu•linux-hwe
< 4.15.0-117.118~16.04.1 | < 5.3.0-67.61
- ubuntu•linux-hwe-5.4
< 5.4.0-47.51~18.04.1
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.15.0-1074.75 | < 5.4.0-1023.23
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
< 4.15.0-1096.106
- ubuntu•linux-oem-5.6
< 5.6.0-1026.26
- ubuntu•linux-oem-osp1
< 5.0.0-1068.73
- ubuntu•linux-oracle
< 4.15.0-1053.57~16.04.1 | < 4.15.0-1053.57 | < 5.4.0-1024.24
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.3
all
- ubuntu•linux-oracle-5.4
< 5.4.0-1024.24~18.04.1
- ubuntu•linux-raspi
< 5.4.0-1018.20
- ubuntu•linux-raspi-5.4
< 5.4.0-1018.20~18.04.1
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.15.0-1070.74 | all
- ubuntu•linux-raspi2-5.3
< 5.3.0-1033.35
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
< 5.4.0-33.37 | all
- ubuntu•linux-snapdragon
< 4.15.0-1086.94
References (7)
- https://ubuntu.com/security/CVE-2020-14386
- https://www.openwall.com/lists/oss-security/2020/09/03/3
- https://www.openwall.com/lists/oss-security/2020/09/04/2
- https://lore.kernel.org/netdev/20200904040528.3635711-1-edumazet@google.com/T/#u
- https://lore.kernel.org/netdev/20200904133052.20299-1-snu@amazon.com/
- https://ubuntu.com/security/notices/USN-4489-1
- https://www.cve.org/CVERecord?id=CVE-2020-14386