CVE-2020-29661

moderate-risk

Published 2020-12-09

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

Do I need to act?

0.28% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (14)

Linux Kernel

Fedora

Debian Linux

Active Iq Unified Manager

Fabric Operating System

Solidfire Baseboard Management Controller Firmware

H410C Firmware

A700S Firmware

8300 Firmware

8700 Firmware

A400 Firmware

Tekelec Platform Distribution

Affected Vendors

Debian Linux Oracle Broadcom Fedoraproject Netapp

References (22)

Third Party Advisory http://packetstormsecurity.com/files/160681/Linux-TIOCSPGRP-Broken-Locking.html

Third Party Advisory http://packetstormsecurity.com/files/164950/Kernel-Live-Patch-Security-Notice-LS...

Mailing List http://www.openwall.com/lists/oss-security/2020/12/10/1

Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=54...

Mailing List https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html

Mailing List https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20210122-0001/

Third Party Advisory https://www.debian.org/security/2021/dsa-4843

Patch https://www.oracle.com/security-alerts/cpuoct2021.html

Third Party Advisory http://packetstormsecurity.com/files/160681/Linux-TIOCSPGRP-Broken-Locking.html

Third Party Advisory http://packetstormsecurity.com/files/164950/Kernel-Live-Patch-Security-Notice-LS...

Mailing List http://www.openwall.com/lists/oss-security/2020/12/10/1

Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=54...

Mailing List https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html

Mailing List https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20210122-0001/

and 2 more references

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 1/34 · Minimal

Exposure 18/34 · Moderate