Vulnerability Description
An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of synchronization between the I/O bitmaps of TSS and Xen, aka CID-cadfad870154.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.5, <= 5.7.9 |
| Xen | Xen | <= 4.13.1 |
| Netapp | Cloud Backup | - |
| Netapp | Steelstore Cloud Integrated Storage | - |
| Netapp | Solidfire Baseboard Management Controller | - |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2020/07/21/2Mailing ListThird Party Advisory
- http://xenbits.xen.org/xsa/advisory-329.htmlPatchThird Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cadfaMailing ListPatchVendor Advisory
- https://github.com/torvalds/linux/commit/cadfad870154e14f745ec845708bc17d166065fPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20200810-0001/Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/21/2Mailing ListThird Party Advisory
- http://xenbits.xen.org/xsa/advisory-329.htmlPatchThird Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cadfaMailing ListPatchVendor Advisory
- https://github.com/torvalds/linux/commit/cadfad870154e14f745ec845708bc17d166065fPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20200810-0001/Third Party Advisory
FAQ
What is CVE-2020-15852?
CVE-2020-15852 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs be...
How severe is CVE-2020-15852?
CVE-2020-15852 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-15852?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Xen Xen, Netapp Cloud Backup, Netapp Steelstore Cloud Integrated Storage, Netapp Solidfire Baseboard Management Controller.