Vulnerability Description
An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.5, <= 5.5.6 |
| Fedoraproject | Fedora | 31 |
| Netapp | Active Iq Unified Manager | - |
| Netapp | Cloud Backup | - |
| Netapp | Data Availability Services | - |
| Netapp | Hci Management Node | - |
| Netapp | Solidfire | - |
| Netapp | Steelstore Cloud Integrated Storage | - |
| Netapp | H410C Firmware | - |
| Netapp | H410C | - |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2020/02/25/6ExploitMailing ListThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1797052ExploitIssue TrackingPatch
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcMailing ListPatchVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://security.netapp.com/advisory/ntap-20200313-0003/Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/25/6ExploitMailing ListThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1797052ExploitIssue TrackingPatch
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcMailing ListPatchVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://security.netapp.com/advisory/ntap-20200313-0003/Third Party Advisory
FAQ
What is CVE-2020-9391?
CVE-2020-9391 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory b...
How severe is CVE-2020-9391?
CVE-2020-9391 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9391?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Fedoraproject Fedora, Netapp Active Iq Unified Manager, Netapp Cloud Backup, Netapp Data Availability Services.