CVE-2020-12652

2020-05-0500:00:00

ubuntu.com

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux
kernel before 5.4.14 allows local users to hold an incorrect lock during
the ioctl operation and trigger a race condition, i.e., a “double fetch”
vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states “The security
impact of this bug is not as bad as it could have been because these
operations are all privileged and root already has enormous destructive
power.”

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-91.92UNKNOWN
ubuntu19.10noarchlinux< 5.3.0-42.34UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-174.204UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1063.67UNKNOWN
ubuntu19.10noarchlinux-aws< 5.3.0-1013.14UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1062.66) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1102.113UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1063.67~16.04.1UNKNOWN
ubuntu19.10noarchlinux-azure< 5.3.0-1016.17UNKNOWN
ubuntu14.04noarchlinux-azure< 4.15.0-1074.79~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-91.92	UNKNOWN
ubuntu	19.10	noarch	linux	< 5.3.0-42.34	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-174.204	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1063.67	UNKNOWN
ubuntu	19.10	noarch	linux-aws	< 5.3.0-1013.14	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1062.66) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1102.113	UNKNOWN
ubuntu	16.04	noarch	linux-aws-hwe	< 4.15.0-1063.67~16.04.1	UNKNOWN
ubuntu	19.10	noarch	linux-azure	< 5.3.0-1016.17	UNKNOWN
ubuntu	14.04	noarch	linux-azure	< 4.15.0-1074.79~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN