Candidate: CVE-2020-12652 PublicDate: 2020-05-05 05:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12652 https://git.kernel.org/linus/28d76df18f0ad5bcf5fa48510b225f0ed262a99b (5.5-rc7) https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28d76df18f0ad5bcf5fa48510b225f0ed262a99b https://github.com/torvalds/linux/commit/28d76df18f0ad5bcf5fa48510b225f0ed262a99b Description: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power." Ubuntu-Description: Notes: Mitigation: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H [4.1 MEDIUM] Patches_linux: break-fix: - 28d76df18f0ad5bcf5fa48510b225f0ed262a99b upstream_linux: released (5.5~rc7) precise/esm_linux: ignored (was needed ESM criteria) trusty_linux: ignored (out of standard support) trusty/esm_linux: ignored (was needed ESM criteria) xenial_linux: released (4.4.0-174.204) esm-infra/xenial_linux: released (4.4.0-174.204) bionic_linux: released (4.15.0-91.92) eoan_linux: released (5.3.0-42.34) focal_linux: not-affected (5.4.0-18.22) groovy_linux: not-affected (5.4.0-26.30) devel_linux: not-affected (5.8.0-36.40+21.04.1) Patches_linux-hwe: upstream_linux-hwe: released (5.5~rc7) precise/esm_linux-hwe: DNE trusty_linux-hwe: DNE trusty/esm_linux-hwe: DNE xenial_linux-hwe: released (4.15.0-91.92~16.04.1) esm-infra/xenial_linux-hwe: released (4.15.0-91.92~16.04.1) bionic_linux-hwe: released (5.3.0-42.34~18.04.1) eoan_linux-hwe: DNE focal_linux-hwe: DNE groovy_linux-hwe: DNE devel_linux-hwe: DNE Patches_linux-hwe-edge: upstream_linux-hwe-edge: released (5.5~rc7) precise/esm_linux-hwe-edge: DNE trusty_linux-hwe-edge: DNE trusty/esm_linux-hwe-edge: DNE xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life) esm-infra/xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life) bionic_linux-hwe-edge: ignored (was needs-triage now end-of-life) eoan_linux-hwe-edge: DNE focal_linux-hwe-edge: DNE groovy_linux-hwe-edge: DNE devel_linux-hwe-edge: DNE Patches_linux-lts-xenial: upstream_linux-lts-xenial: released (5.5~rc7) precise/esm_linux-lts-xenial: DNE trusty_linux-lts-xenial: ignored (out of standard support) trusty/esm_linux-lts-xenial: released (4.4.0-174.204~14.04.1) xenial_linux-lts-xenial: DNE bionic_linux-lts-xenial: DNE eoan_linux-lts-xenial: DNE focal_linux-lts-xenial: DNE groovy_linux-lts-xenial: DNE devel_linux-lts-xenial: DNE Patches_linux-lts-trusty: upstream_linux-lts-trusty: released (5.5~rc7) precise/esm_linux-lts-trusty: ignored (was needed ESM criteria) trusty_linux-lts-trusty: DNE trusty/esm_linux-lts-trusty: DNE xenial_linux-lts-trusty: DNE bionic_linux-lts-trusty: DNE eoan_linux-lts-trusty: DNE focal_linux-lts-trusty: DNE groovy_linux-lts-trusty: DNE devel_linux-lts-trusty: DNE Patches_linux-oem: upstream_linux-oem: released (5.5~rc7) precise/esm_linux-oem: DNE trusty_linux-oem: DNE trusty/esm_linux-oem: DNE xenial_linux-oem: ignored (was needs-triage now end-of-life) bionic_linux-oem: released (4.15.0-1076.86) eoan_linux-oem: ignored (was pending \[4.15.0-1076.86\] now end-of-life) focal_linux-oem: DNE groovy_linux-oem: DNE devel_linux-oem: DNE Patches_linux-oem-osp1: upstream_linux-oem-osp1: released (5.5~rc7) precise/esm_linux-oem-osp1: DNE trusty_linux-oem-osp1: DNE trusty/esm_linux-oem-osp1: DNE xenial_linux-oem-osp1: DNE bionic_linux-oem-osp1: released (5.0.0-1043.48) eoan_linux-oem-osp1: ignored (was pending \[5.0.0-1043.48\] now end-of-life) focal_linux-oem-osp1: DNE groovy_linux-oem-osp1: DNE devel_linux-oem-osp1: DNE Patches_linux-kvm: upstream_linux-kvm: released (5.5~rc7) precise/esm_linux-kvm: DNE trusty_linux-kvm: DNE trusty/esm_linux-kvm: DNE xenial_linux-kvm: released (4.4.0-1066.73) esm-infra/xenial_linux-kvm: released (4.4.0-1066.73) bionic_linux-kvm: released (4.15.0-1056.57) eoan_linux-kvm: released (5.3.0-1012.13) focal_linux-kvm: not-affected (5.4.0-1004.4) groovy_linux-kvm: not-affected (5.4.0-1009.9) devel_linux-kvm: not-affected (5.8.0-1010.11+21.04.1) Patches_linux-aws: upstream_linux-aws: released (5.5~rc7) precise/esm_linux-aws: DNE trusty_linux-aws: ignored (out of standard support) trusty/esm_linux-aws: released (4.4.0-1062.66) xenial_linux-aws: released (4.4.0-1102.113) esm-infra/xenial_linux-aws: released (4.4.0-1102.113) bionic_linux-aws: released (4.15.0-1063.67) eoan_linux-aws: released (5.3.0-1013.14) focal_linux-aws: not-affected (5.4.0-1005.5) groovy_linux-aws: not-affected (5.4.0-1009.9) devel_linux-aws: not-affected (5.8.0-1018.20+21.04.1) Patches_linux-aws-5.0: upstream_linux-aws-5.0: released (5.5~rc7) precise/esm_linux-aws-5.0: DNE trusty_linux-aws-5.0: DNE trusty/esm_linux-aws-5.0: DNE xenial_linux-aws-5.0: DNE bionic_linux-aws-5.0: ignored (was needs-triage now end-of-life) eoan_linux-aws-5.0: DNE focal_linux-aws-5.0: DNE groovy_linux-aws-5.0: DNE devel_linux-aws-5.0: DNE Patches_linux-aws-hwe: upstream_linux-aws-hwe: released (5.5~rc7) precise/esm_linux-aws-hwe: DNE trusty_linux-aws-hwe: DNE trusty/esm_linux-aws-hwe: DNE xenial_linux-aws-hwe: released (4.15.0-1063.67~16.04.1) esm-infra/xenial_linux-aws-hwe: released (4.15.0-1063.67~16.04.1) bionic_linux-aws-hwe: DNE eoan_linux-aws-hwe: DNE focal_linux-aws-hwe: DNE groovy_linux-aws-hwe: DNE devel_linux-aws-hwe: DNE Patches_linux-azure: upstream_linux-azure: released (5.5~rc7) precise/esm_linux-azure: DNE trusty_linux-azure: ignored (out of standard support) trusty/esm_linux-azure: released (4.15.0-1074.79~14.04.1) xenial_linux-azure: released (4.15.0-1075.80) esm-infra/xenial_linux-azure: released (4.15.0-1075.80) bionic_linux-azure: ignored (was needs-triage now end-of-life) eoan_linux-azure: released (5.3.0-1016.17) focal_linux-azure: not-affected (5.4.0-1006.6) groovy_linux-azure: not-affected (5.4.0-1010.10) devel_linux-azure: not-affected (5.8.0-1016.17+21.04.1) Patches_linux-azure-5.3: upstream_linux-azure-5.3: released (5.5~rc7) precise/esm_linux-azure-5.3: DNE trusty_linux-azure-5.3: DNE trusty/esm_linux-azure-5.3: DNE xenial_linux-azure-5.3: DNE bionic_linux-azure-5.3: released (5.3.0-1016.17~18.04.1) eoan_linux-azure-5.3: DNE focal_linux-azure-5.3: DNE groovy_linux-azure-5.3: DNE devel_linux-azure-5.3: DNE Patches_linux-azure-edge: upstream_linux-azure-edge: released (5.5~rc7) precise/esm_linux-azure-edge: DNE trusty_linux-azure-edge: DNE trusty/esm_linux-azure-edge: DNE xenial_linux-azure-edge: DNE bionic_linux-azure-edge: ignored (was needs-triage now end-of-life) eoan_linux-azure-edge: DNE focal_linux-azure-edge: DNE groovy_linux-azure-edge: DNE devel_linux-azure-edge: DNE Patches_linux-gcp: upstream_linux-gcp: released (5.5~rc7) precise/esm_linux-gcp: DNE trusty_linux-gcp: DNE trusty/esm_linux-gcp: DNE xenial_linux-gcp: released (4.15.0-1058.62) esm-infra/xenial_linux-gcp: released (4.15.0-1058.62) bionic_linux-gcp: ignored (was needs-triage now end-of-life) eoan_linux-gcp: released (5.3.0-1014.15) focal_linux-gcp: not-affected (5.4.0-1005.5) groovy_linux-gcp: not-affected (5.4.0-1009.9) devel_linux-gcp: not-affected (5.8.0-1015.15+21.04.1) Patches_linux-gcp-5.3: upstream_linux-gcp-5.3: released (5.5~rc7) precise/esm_linux-gcp-5.3: DNE trusty_linux-gcp-5.3: DNE trusty/esm_linux-gcp-5.3: DNE xenial_linux-gcp-5.3: DNE bionic_linux-gcp-5.3: released (5.3.0-1014.15~18.04.1) eoan_linux-gcp-5.3: DNE focal_linux-gcp-5.3: DNE groovy_linux-gcp-5.3: DNE devel_linux-gcp-5.3: DNE Patches_linux-gcp-edge: upstream_linux-gcp-edge: released (5.5~rc7) precise/esm_linux-gcp-edge: DNE trusty_linux-gcp-edge: DNE trusty/esm_linux-gcp-edge: DNE xenial_linux-gcp-edge: DNE bionic_linux-gcp-edge: ignored (was needs-triage now end-of-life) eoan_linux-gcp-edge: DNE focal_linux-gcp-edge: DNE groovy_linux-gcp-edge: DNE devel_linux-gcp-edge: DNE Patches_linux-gke-4.15: upstream_linux-gke-4.15: released (5.5~rc7) precise/esm_linux-gke-4.15: DNE trusty_linux-gke-4.15: DNE trusty/esm_linux-gke-4.15: DNE xenial_linux-gke-4.15: DNE bionic_linux-gke-4.15: released (4.15.0-1055.58) eoan_linux-gke-4.15: DNE focal_linux-gke-4.15: DNE groovy_linux-gke-4.15: DNE devel_linux-gke-4.15: DNE Patches_linux-gke-5.0: upstream_linux-gke-5.0: released (5.5~rc7) precise/esm_linux-gke-5.0: DNE trusty_linux-gke-5.0: DNE trusty/esm_linux-gke-5.0: DNE xenial_linux-gke-5.0: DNE bionic_linux-gke-5.0: released (5.0.0-1032.33) eoan_linux-gke-5.0: DNE focal_linux-gke-5.0: DNE groovy_linux-gke-5.0: DNE devel_linux-gke-5.0: DNE Patches_linux-oracle: upstream_linux-oracle: released (5.5~rc7) precise/esm_linux-oracle: DNE trusty_linux-oracle: DNE trusty/esm_linux-oracle: DNE xenial_linux-oracle: released (4.15.0-1035.38~16.04.1) esm-infra/xenial_linux-oracle: released (4.15.0-1035.38~16.04.1) bionic_linux-oracle: released (4.15.0-1035.39) eoan_linux-oracle: released (5.3.0-1011.12) focal_linux-oracle: not-affected (5.4.0-1005.5) groovy_linux-oracle: not-affected (5.4.0-1009.9) devel_linux-oracle: not-affected (5.8.0-1014.14+21.04.1) Patches_linux-oracle-5.0: upstream_linux-oracle-5.0: released (5.5~rc7) precise/esm_linux-oracle-5.0: DNE trusty_linux-oracle-5.0: DNE trusty/esm_linux-oracle-5.0: DNE xenial_linux-oracle-5.0: DNE bionic_linux-oracle-5.0: ignored (was needs-triage now end-of-life) eoan_linux-oracle-5.0: DNE focal_linux-oracle-5.0: DNE groovy_linux-oracle-5.0: DNE devel_linux-oracle-5.0: DNE Patches_linux-raspi2: upstream_linux-raspi2: released (5.5~rc7) precise/esm_linux-raspi2: DNE trusty_linux-raspi2: DNE trusty/esm_linux-raspi2: DNE xenial_linux-raspi2: released (4.4.0-1129.138) bionic_linux-raspi2: released (4.15.0-1057.61) eoan_linux-raspi2: released (5.3.0-1019.21) focal_linux-raspi2: ignored (was needs-triage now end-of-life) groovy_linux-raspi2: DNE devel_linux-raspi2: DNE Patches_linux-snapdragon: upstream_linux-snapdragon: released (5.5~rc7) precise/esm_linux-snapdragon: DNE trusty_linux-snapdragon: DNE trusty/esm_linux-snapdragon: DNE xenial_linux-snapdragon: released (4.4.0-1133.141) bionic_linux-snapdragon: released (4.15.0-1074.81) eoan_linux-snapdragon: DNE focal_linux-snapdragon: DNE groovy_linux-snapdragon: DNE devel_linux-snapdragon: DNE Patches_linux-raspi2-5.3: upstream_linux-raspi2-5.3: released (5.5~rc7) precise/esm_linux-raspi2-5.3: DNE trusty_linux-raspi2-5.3: DNE trusty/esm_linux-raspi2-5.3: DNE xenial_linux-raspi2-5.3: DNE bionic_linux-raspi2-5.3: released (5.3.0-1019.21~18.04.1) eoan_linux-raspi2-5.3: DNE focal_linux-raspi2-5.3: DNE groovy_linux-raspi2-5.3: DNE devel_linux-raspi2-5.3: DNE Patches_linux-oem-5.6: upstream_linux-oem-5.6: released (5.5~rc7) precise/esm_linux-oem-5.6: DNE trusty_linux-oem-5.6: DNE trusty/esm_linux-oem-5.6: DNE xenial_linux-oem-5.6: DNE bionic_linux-oem-5.6: DNE eoan_linux-oem-5.6: DNE focal_linux-oem-5.6: not-affected (5.6.0-1007.7) groovy_linux-oem-5.6: DNE devel_linux-oem-5.6: DNE Patches_linux-gke-5.3: upstream_linux-gke-5.3: released (5.5~rc7) precise/esm_linux-gke-5.3: DNE trusty_linux-gke-5.3: DNE trusty/esm_linux-gke-5.3: DNE xenial_linux-gke-5.3: DNE bionic_linux-gke-5.3: released (5.3.0-1014.15~18.04.1) eoan_linux-gke-5.3: DNE focal_linux-gke-5.3: DNE groovy_linux-gke-5.3: DNE devel_linux-gke-5.3: DNE Patches_linux-oracle-5.3: upstream_linux-oracle-5.3: released (5.5~rc7) precise/esm_linux-oracle-5.3: DNE trusty_linux-oracle-5.3: DNE trusty/esm_linux-oracle-5.3: DNE xenial_linux-oracle-5.3: DNE bionic_linux-oracle-5.3: not-affected (5.3.0-1011.12~18.04.1) eoan_linux-oracle-5.3: DNE focal_linux-oracle-5.3: DNE groovy_linux-oracle-5.3: DNE devel_linux-oracle-5.3: DNE Patches_linux-riscv: upstream_linux-riscv: released (5.5~rc7) precise/esm_linux-riscv: DNE trusty_linux-riscv: DNE trusty/esm_linux-riscv: DNE xenial_linux-riscv: DNE bionic_linux-riscv: DNE eoan_linux-riscv: DNE focal_linux-riscv: not-affected (5.4.0-24.28) groovy_linux-riscv: not-affected (5.4.0-24.28) devel_linux-riscv: not-affected (5.8.0-10.12+21.04.1) Patches_linux-raspi: upstream_linux-raspi: released (5.5~rc7) precise/esm_linux-raspi: DNE trusty_linux-raspi: DNE trusty/esm_linux-raspi: DNE xenial_linux-raspi: DNE bionic_linux-raspi: DNE eoan_linux-raspi: DNE focal_linux-raspi: not-affected (5.4.0-1007.7) groovy_linux-raspi: not-affected (5.4.0-1008.8) devel_linux-raspi: not-affected (5.8.0-1008.11+21.04.1) Patches_linux-azure-4.15: upstream_linux-azure-4.15: released (5.5~rc7) precise/esm_linux-azure-4.15: DNE trusty_linux-azure-4.15: DNE trusty/esm_linux-azure-4.15: DNE xenial_linux-azure-4.15: DNE bionic_linux-azure-4.15: not-affected (4.15.0-1082.92) eoan_linux-azure-4.15: DNE focal_linux-azure-4.15: DNE groovy_linux-azure-4.15: DNE devel_linux-azure-4.15: DNE Patches_linux-aws-5.3: upstream_linux-aws-5.3: released (5.5~rc7) precise/esm_linux-aws-5.3: DNE trusty_linux-aws-5.3: DNE trusty/esm_linux-aws-5.3: DNE xenial_linux-aws-5.3: DNE bionic_linux-aws-5.3: not-affected (5.3.0-1016.17~18.04.1) eoan_linux-aws-5.3: DNE focal_linux-aws-5.3: DNE groovy_linux-aws-5.3: DNE devel_linux-aws-5.3: DNE Patches_linux-gcp-4.15: upstream_linux-gcp-4.15: released (5.5~rc7) precise/esm_linux-gcp-4.15: DNE trusty_linux-gcp-4.15: DNE trusty/esm_linux-gcp-4.15: DNE xenial_linux-gcp-4.15: DNE bionic_linux-gcp-4.15: not-affected (4.15.0-1071.81) eoan_linux-gcp-4.15: DNE focal_linux-gcp-4.15: DNE groovy_linux-gcp-4.15: DNE devel_linux-gcp-4.15: DNE Patches_linux-hwe-5.4: upstream_linux-hwe-5.4: released (5.5~rc7) precise/esm_linux-hwe-5.4: DNE trusty_linux-hwe-5.4: DNE trusty/esm_linux-hwe-5.4: DNE xenial_linux-hwe-5.4: DNE bionic_linux-hwe-5.4: not-affected (5.4.0-37.41~18.04.1) focal_linux-hwe-5.4: DNE groovy_linux-hwe-5.4: DNE devel_linux-hwe-5.4: DNE Patches_linux-raspi-5.4: upstream_linux-raspi-5.4: released (5.5~rc7) precise/esm_linux-raspi-5.4: DNE trusty_linux-raspi-5.4: DNE trusty/esm_linux-raspi-5.4: DNE xenial_linux-raspi-5.4: DNE bionic_linux-raspi-5.4: not-affected (5.4.0-1013.13~18.04.1) focal_linux-raspi-5.4: DNE groovy_linux-raspi-5.4: DNE devel_linux-raspi-5.4: DNE Patches_linux-azure-5.4: upstream_linux-azure-5.4: released (5.5~rc7) precise/esm_linux-azure-5.4: DNE trusty_linux-azure-5.4: DNE trusty/esm_linux-azure-5.4: DNE xenial_linux-azure-5.4: DNE bionic_linux-azure-5.4: not-affected (5.4.0-1020.20~18.04.1) focal_linux-azure-5.4: DNE groovy_linux-azure-5.4: DNE devel_linux-azure-5.4: DNE Patches_linux-oracle-5.4: upstream_linux-oracle-5.4: released (5.5~rc7) precise/esm_linux-oracle-5.4: DNE trusty_linux-oracle-5.4: DNE trusty/esm_linux-oracle-5.4: DNE xenial_linux-oracle-5.4: DNE bionic_linux-oracle-5.4: not-affected (5.4.0-1019.19~18.04.1) focal_linux-oracle-5.4: DNE groovy_linux-oracle-5.4: DNE devel_linux-oracle-5.4: DNE Patches_linux-gcp-5.4: upstream_linux-gcp-5.4: released (5.5~rc7) precise/esm_linux-gcp-5.4: DNE trusty_linux-gcp-5.4: DNE trusty/esm_linux-gcp-5.4: DNE xenial_linux-gcp-5.4: DNE bionic_linux-gcp-5.4: not-affected (5.4.0-1019.19~18.04.2) focal_linux-gcp-5.4: DNE groovy_linux-gcp-5.4: DNE devel_linux-gcp-5.4: DNE Patches_linux-aws-5.4: upstream_linux-aws-5.4: released (5.5~rc7) precise/esm_linux-aws-5.4: DNE trusty_linux-aws-5.4: DNE trusty/esm_linux-aws-5.4: DNE xenial_linux-aws-5.4: DNE bionic_linux-aws-5.4: not-affected (5.4.0-1018.18~18.04.1) focal_linux-aws-5.4: DNE groovy_linux-aws-5.4: DNE devel_linux-aws-5.4: DNE Patches_linux-hwe-5.8: upstream_linux-hwe-5.8: released (5.5~rc7) precise/esm_linux-hwe-5.8: DNE trusty_linux-hwe-5.8: DNE trusty/esm_linux-hwe-5.8: DNE xenial_linux-hwe-5.8: DNE bionic_linux-hwe-5.8: DNE focal_linux-hwe-5.8: not-affected (5.8.0-23.24~20.04.1) groovy_linux-hwe-5.8: DNE devel_linux-hwe-5.8: DNE Patches_linux-gke-5.4: upstream_linux-gke-5.4: released (5.5~rc7) precise/esm_linux-gke-5.4: DNE trusty_linux-gke-5.4: DNE trusty/esm_linux-gke-5.4: DNE xenial_linux-gke-5.4: DNE bionic_linux-gke-5.4: not-affected (5.4.0-1025.25~18.04.1) focal_linux-gke-5.4: DNE groovy_linux-gke-5.4: DNE devel_linux-gke-5.4: DNE Patches_linux-gkeop-5.4: upstream_linux-gkeop-5.4: released (5.5~rc7) precise/esm_linux-gkeop-5.4: DNE trusty_linux-gkeop-5.4: DNE trusty/esm_linux-gkeop-5.4: DNE xenial_linux-gkeop-5.4: DNE bionic_linux-gkeop-5.4: not-affected (5.4.0-1001.1) focal_linux-gkeop-5.4: DNE groovy_linux-gkeop-5.4: DNE devel_linux-gkeop-5.4: DNE Patches_linux-dell300x: upstream_linux-dell300x: released (5.5~rc7) precise/esm_linux-dell300x: DNE trusty_linux-dell300x: DNE trusty/esm_linux-dell300x: DNE xenial_linux-dell300x: DNE bionic_linux-dell300x: not-affected (4.15.0-1005.8) focal_linux-dell300x: DNE groovy_linux-dell300x: DNE devel_linux-dell300x: DNE Patches_linux-oem-5.10: upstream_linux-oem-5.10: released (5.5~rc7) precise/esm_linux-oem-5.10: DNE trusty_linux-oem-5.10: DNE trusty/esm_linux-oem-5.10: DNE xenial_linux-oem-5.10: DNE bionic_linux-oem-5.10: DNE focal_linux-oem-5.10: not-affected (5.10.0-1008.9) groovy_linux-oem-5.10: DNE devel_linux-oem-5.10: DNE Patches_linux-gkeop: upstream_linux-gkeop: released (5.5~rc7) precise/esm_linux-gkeop: DNE trusty_linux-gkeop: DNE trusty/esm_linux-gkeop: DNE xenial_linux-gkeop: DNE bionic_linux-gkeop: DNE focal_linux-gkeop: not-affected (5.4.0-1008.9) groovy_linux-gkeop: DNE devel_linux-gkeop: DNE