CVE-2020-10942
Published: 24 March 2020
In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
From the Ubuntu security team
It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of service (system crash).
Priority
Medium
CVSS 3 base score: 5.3
Status
| Package | Release | Status |
|---|---|---|
|
linux Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-26.30)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-18.22)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-99.100)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.4.0-179.209)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Ignored
(was needed ESM criteria)
|
|
|
Patches: Introduced by 3a4d5c94e959359ece6d6b55045c3f046677f55c Fixed by 42d84c8490f9f0931786f1623191fcab397c3d64 |
||
|
linux-aws Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1009.9)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1005.5)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1066.70)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.4.0-1107.118)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(4.4.0-1067.71)
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1017.18~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.15.0-1066.70~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1010.10)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1006.6)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needed now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.15.0-1082.92~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Ignored
(was needed ESM criteria)
|
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(4.15.0-1082.92)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1020.21~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1009.9)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1005.5)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needed now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.15.0-1061.65)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(4.15.0-1071.81)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1018.19~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1058.61)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.0.0-1035.36)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1018.19~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-51.44~18.04.2)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.15.0-99.100~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1009.9)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1004.4)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1059.60)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.4.0-1071.78)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(4.4.0-179.209~14.04.1)
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1080.90)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.6.0-1007.7)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.6.0-1007.7)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.0.0-1050.55)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1009.9)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1005.5)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1038.42)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.15.0-1038.42~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was needed now end-of-life)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1016.18~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-raspi Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-1008.8)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-1007.7)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1061.65)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.4.0-1133.142)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.3.0-1023.25~18.04.1)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-riscv Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(5.4.0-24.28)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(5.4.0-24.28)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.6~rc4)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1077.84)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(4.4.0-1137.145)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10942
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
- https://git.kernel.org/linus/42d84c8490f9f0931786f1623191fcab397c3d64
- https://lkml.org/lkml/2020/2/15/125
- https://usn.ubuntu.com/usn/usn-4342-1
- https://usn.ubuntu.com/usn/usn-4344-1
- https://usn.ubuntu.com/usn/usn-4345-1
- https://usn.ubuntu.com/usn/usn-4364-1
- NVD
- Launchpad
- Debian