CVE-2020-11565

Published: 6 April 2020

** DISPUTED ** An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”.

From the Ubuntu security team

It was discovered that the linux kernel did not properly validate certain mount options to the tmpfs virtual memory file system. A local attacker with the ability to specify mount options could use this to cause a denial of service (system crash).

Priority

Medium

CVSS 3 base score: 6.0

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11565
• https://git.kernel.org/linus/aa9f7d5172fac9bf1f09e678c35e287a40a7b7dd
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa9f7d5172fac9bf1f09e678c35e287a40a7b7dd
• https://github.com/torvalds/linux/commit/aa9f7d5172fac9bf1f09e678c35e287a40a7b7dd
• https://ubuntu.com/security/notices/USN-4363-1
• https://ubuntu.com/security/notices/USN-4364-1
• https://ubuntu.com/security/notices/USN-4369-1
• https://ubuntu.com/security/notices/USN-4368-1
• https://ubuntu.com/security/notices/USN-4367-1
• NVD
• Launchpad
• Debian

Bugs