CVE-2020-27777

2020-12-1516:57:45

CWE-862

redhat

www.cve.org

flaw

rtas

memory access

pseries platform

secure boot

local user

privilege escalation

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kernel 5.10-rc1"
      }
    ]
  }
]