CVE-2020-14386
Published: 4 September 2020
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
From the Ubuntu Security Team
Or Cohen discovered that the AF_PACKET implementation in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Notes
Author | Note |
---|---|
sbeattie | requires CAP_NET_RAW |
cascardo | Added break as investigated by Solar Designer. |
sbeattie | older backports without 8e8e2951e309 will need second lore.kernel.org variant |
Mitigation
If unprivileged user namespaces are not needed, set the kernel.unprivileged_userns_clone sysctl to 0; e.g. $ sudo sysctl kernel.unprivileged_userns_clone=0
Priority
Status
Package | Release | Status |
---|---|---|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1001.1)
|
upstream |
Released
(5.9~rc4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-1003.3)
|
bionic |
Ignored
(end of life, was needs-triage)
|
|
focal |
Released
(5.4.0-1024.24)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Released
(4.15.0-1083.94~16.04.1)
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
groovy |
Does not exist
|
bionic |
Ignored
(end of life, was needs-triage)
|
|
focal |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
xenial |
Ignored
(end of standard support, was needs-triage)
|
bionic |
Released
(4.15.0-1096.106)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.6.0-1026.26)
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-19.20)
|
bionic |
Released
(4.15.0-117.118)
|
|
focal |
Released
(5.4.0-47.51)
|
|
trusty |
Not vulnerable
(3.11.0-12.19)
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Not vulnerable
(4.2.0-16.19)
|
|
Patches: Introduced by 58d19b19cd99b438541eea4cdbf5c171900b25e5 |
||
linux-aws Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-1006.6)
|
bionic |
Released
(4.15.0-1082.86)
|
|
focal |
Released
(5.4.0-1024.24)
|
|
trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
linux-azure Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-1005.5)
|
bionic |
Ignored
(end of life, was needs-triage)
|
|
focal |
Released
(5.4.0-1025.25)
|
|
trusty |
Released
(4.15.0-1095.105~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Released
(4.15.0-1095.105~16.04.1)
|
|
linux-kvm Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-1002.2)
|
bionic |
Released
(4.15.0-1074.75)
|
|
focal |
Released
(5.4.0-1023.23)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
groovy |
Not vulnerable
(5.8.0-1002.2)
|
bionic |
Released
(4.15.0-1053.57)
|
|
focal |
Released
(5.4.0-1024.24)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Released
(4.15.0-1053.57~16.04.1)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1035.37)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1024.24~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Released
(4.15.0-1082.86~16.04.1)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1095.105)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1025.25~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1083.94)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1024.24~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1069.72)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.0.0-1047.48)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1036.38)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-hwe Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-67.61)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Released
(4.15.0-117.118~16.04.1)
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-47.51~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.8.0-23.24~20.04.1)
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Ignored
(end of life, was needs-triage)
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.0.0-1068.73)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1024.24~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1018.20)
|
|
groovy |
Not vulnerable
(5.8.0-1003.6)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1018.20~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1070.74)
|
focal |
Ignored
(end of life, was needs-triage)
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Not vulnerable
(4.2.0-1013.19)
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1033.35)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-33.37)
|
|
groovy |
Not vulnerable
(5.8.0-3.3)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Does not exist
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1086.94)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.9~rc4)
|
|
xenial |
Not vulnerable
(4.4.0-1013.15)
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14386
- https://www.openwall.com/lists/oss-security/2020/09/03/3
- https://www.openwall.com/lists/oss-security/2020/09/04/2
- https://lore.kernel.org/netdev/20200904040528.3635711-1-edumazet@google.com/T/#u
- https://lore.kernel.org/netdev/20200904133052.20299-1-snu@amazon.com/
- https://ubuntu.com/security/notices/USN-4489-1
- NVD
- Launchpad
- Debian