CVE-2020-8648
Published: 6 February 2020
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
From the Ubuntu Security Team
It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition. A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive information.
Notes
| Author | Note |
|---|---|
| cascardo |
This looks like a race between set_selection_kernel and paste_selection that may lead to data leak. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-99.100)
|
| eoan |
Released
(5.3.0-51.44)
|
|
| focal |
Not vulnerable
(5.4.0-21.25)
|
|
| trusty |
Ignored
(was needs-triage ESM criteria)
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.4.0-178.208)
|
|
|
Patches:
Introduced by
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
|
||
|
linux-aws
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1066.70)
|
| eoan |
Released
(5.3.0-1017.18)
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| trusty |
Released
(4.4.0-1066.70)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.4.0-1106.117)
|
|
|
linux-aws-5.0
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needed)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-aws-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1017.18~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-aws-hwe
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.15.0-1066.70~16.04.1)
|
|
|
linux-azure
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needed)
|
| eoan |
Released
(5.3.0-1020.21)
|
|
| focal |
Not vulnerable
(5.4.0-1008.8)
|
|
| trusty |
Ignored
(was needs-triage ESM criteria)
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.15.0-1082.92~16.04.1)
|
|
|
linux-azure-4.15
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1082.92)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-azure-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1020.21~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-azure-edge
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gcp
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needed)
|
| eoan |
Released
(5.3.0-1018.19)
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.15.0-1061.65)
|
|
|
linux-gcp-4.15
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1071.81)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gcp-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1018.19~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gcp-edge
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gke-4.15
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1058.61)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gke-5.0
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.0.0-1035.36)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-gke-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1018.19~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-hwe
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-51.44~18.04.2)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.15.0-99.100~16.04.1)
|
|
|
linux-hwe-edge
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Ignored
(end of life, was needs-triage)
|
|
|
linux-kvm
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1059.60)
|
| eoan |
Released
(5.3.0-1016.17)
|
|
| focal |
Not vulnerable
(5.4.0-1006.6)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.4.0-1070.77)
|
|
|
linux-lts-trusty
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-lts-xenial
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Released
(4.4.0-178.208~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-oem
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1080.90)
|
| eoan |
Ignored
(end of life, was pending)
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Ignored
(end of standard support, was needs-triage)
|
|
|
linux-oem-5.6
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.6.0-1007.7)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-oem-osp1
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.0.0-1050.55)
|
| eoan |
Ignored
(end of life, was pending)
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-oracle
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1038.42)
|
| eoan |
Released
(5.3.0-1016.18)
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.15.0-1038.42~16.04.1)
|
|
|
linux-oracle-5.0
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needed)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-oracle-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1016.18~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-raspi
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-raspi2
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1061.65)
|
| eoan |
Released
(5.3.0-1023.25)
|
|
| focal |
Ignored
(end of life, was needs-triage)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.4.0-1132.141)
|
|
|
linux-raspi2-5.3
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.3.0-1023.25~18.04.1)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-riscv
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-24.28)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Does not exist
|
|
|
linux-snapdragon
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1077.84)
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.6~rc3)
|
|
| xenial |
Released
(4.4.0-1136.144)
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.1 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
References
- https://bugzilla.kernel.org/show_bug.cgi?id=206361
- https://ubuntu.com/security/notices/USN-4342-1
- https://ubuntu.com/security/notices/USN-4344-1
- https://ubuntu.com/security/notices/USN-4345-1
- https://ubuntu.com/security/notices/USN-4346-1
- https://usn.ubuntu.com/lsn/0066-1/
- https://www.cve.org/CVERecord?id=CVE-2020-8648
- https://ubuntu.com/security/notices/LSN-0066-1
- https://ubuntu.com/security/notices/LSN-0068-1
- NVD
- Launchpad
- Debian