Candidate: CVE-2020-25221
PublicDate: 2020-09-10 14:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25221
 https://git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2
 http://www.openwall.com/lists/oss-security/2020/09/10/4
 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7
 https://git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73a
 https://www.openwall.com/lists/oss-security/2020/09/08/4
Description:
 get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7
 allows privilege escalation because of incorrect reference counting (caused
 by gate page mishandling) of the struct page that backs the vsyscall page.
 The result is a refcount underflow. This can be triggered by any 64-bit
 process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Ubuntu-Description:
Notes:
Mitigation:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]

Patches_linux:
 break-fix: 3faa52c03f440d1b9ddef18c4f189f4790d52d7e 9fa2dd946743ae6f30dc4830da19147bf100a7f2
upstream_linux: released (5.9~rc4)
precise/esm_linux: ignored (was needs-triage ESM criteria)
trusty_linux: ignored (out of standard support)
trusty/esm_linux: ignored (was needs-triage ESM criteria)
xenial_linux: not-affected (4.2.0-16.19)
esm-infra/xenial_linux: not-affected (4.2.0-16.19)
bionic_linux: not-affected (4.13.0-16.19)
focal_linux: not-affected (5.4.0-9.12)
groovy_linux: not-affected (5.8.0-19.20)
devel_linux: not-affected

Patches_linux-hwe:
upstream_linux-hwe: released (5.9~rc4)
precise/esm_linux-hwe: DNE
trusty_linux-hwe: DNE
trusty/esm_linux-hwe: DNE
xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
esm-infra/xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
bionic_linux-hwe: not-affected (4.18.0-13.14~18.04.1)
focal_linux-hwe: DNE
groovy_linux-hwe: DNE
devel_linux-hwe: DNE

Patches_linux-hwe-5.4:
upstream_linux-hwe-5.4: released (5.9~rc4)
precise/esm_linux-hwe-5.4: DNE
trusty_linux-hwe-5.4: DNE
trusty/esm_linux-hwe-5.4: DNE
xenial_linux-hwe-5.4: DNE
bionic_linux-hwe-5.4: not-affected (5.4.0-37.41~18.04.1)
focal_linux-hwe-5.4: DNE
groovy_linux-hwe-5.4: DNE
devel_linux-hwe-5.4: DNE

Patches_linux-hwe-edge:
upstream_linux-hwe-edge: released (5.9~rc4)
precise/esm_linux-hwe-edge: DNE
trusty_linux-hwe-edge: DNE
trusty/esm_linux-hwe-edge: DNE
xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life)
esm-infra/xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life)
bionic_linux-hwe-edge: ignored (was needs-triage now end-of-life)
focal_linux-hwe-edge: DNE
groovy_linux-hwe-edge: DNE
devel_linux-hwe-edge: DNE

Patches_linux-lts-trusty:
upstream_linux-lts-trusty: released (5.9~rc4)
precise/esm_linux-lts-trusty: ignored (was needs-triage ESM criteria)
trusty_linux-lts-trusty: DNE
trusty/esm_linux-lts-trusty: DNE
xenial_linux-lts-trusty: DNE
bionic_linux-lts-trusty: DNE
focal_linux-lts-trusty: DNE
groovy_linux-lts-trusty: DNE
devel_linux-lts-trusty: DNE

Patches_linux-lts-xenial:
upstream_linux-lts-xenial: released (5.9~rc4)
precise/esm_linux-lts-xenial: DNE
trusty_linux-lts-xenial: ignored (out of standard support)
trusty/esm_linux-lts-xenial: ignored (was needs-triage ESM criteria)
xenial_linux-lts-xenial: DNE
bionic_linux-lts-xenial: DNE
focal_linux-lts-xenial: DNE
groovy_linux-lts-xenial: DNE
devel_linux-lts-xenial: DNE

Patches_linux-kvm:
upstream_linux-kvm: released (5.9~rc4)
precise/esm_linux-kvm: DNE
trusty_linux-kvm: DNE
trusty/esm_linux-kvm: DNE
xenial_linux-kvm: not-affected (4.4.0-1004.9)
esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
bionic_linux-kvm: not-affected (4.15.0-1002.2)
focal_linux-kvm: not-affected (5.4.0-1004.4)
groovy_linux-kvm: not-affected (5.8.0-1002.2)
devel_linux-kvm: not-affected

Patches_linux-aws:
upstream_linux-aws: released (5.9~rc4)
precise/esm_linux-aws: DNE
trusty_linux-aws: ignored (out of standard support)
trusty/esm_linux-aws: ignored (was needs-triage ESM criteria)
xenial_linux-aws: not-affected (4.4.0-1001.10)
esm-infra/xenial_linux-aws: not-affected (4.4.0-1001.10)
bionic_linux-aws: not-affected (4.15.0-1001.1)
focal_linux-aws: not-affected (5.4.0-1005.5)
groovy_linux-aws: not-affected (5.8.0-1006.6)
devel_linux-aws: not-affected

Patches_linux-aws-5.0:
upstream_linux-aws-5.0: released (5.9~rc4)
precise/esm_linux-aws-5.0: DNE
trusty_linux-aws-5.0: DNE
trusty/esm_linux-aws-5.0: DNE
xenial_linux-aws-5.0: DNE
bionic_linux-aws-5.0: ignored (was needs-triage now end-of-life)
focal_linux-aws-5.0: DNE
groovy_linux-aws-5.0: DNE
devel_linux-aws-5.0: DNE

Patches_linux-aws-5.3:
upstream_linux-aws-5.3: released (5.9~rc4)
precise/esm_linux-aws-5.3: DNE
trusty_linux-aws-5.3: DNE
trusty/esm_linux-aws-5.3: DNE
xenial_linux-aws-5.3: DNE
bionic_linux-aws-5.3: ignored (was needs-triage now end-of-life)
focal_linux-aws-5.3: DNE
groovy_linux-aws-5.3: DNE
devel_linux-aws-5.3: DNE

Patches_linux-aws-5.4:
upstream_linux-aws-5.4: released (5.9~rc4)
precise/esm_linux-aws-5.4: DNE
trusty_linux-aws-5.4: DNE
trusty/esm_linux-aws-5.4: DNE
xenial_linux-aws-5.4: DNE
bionic_linux-aws-5.4: not-affected (5.4.0-1018.18~18.04.1)
focal_linux-aws-5.4: DNE
groovy_linux-aws-5.4: DNE
devel_linux-aws-5.4: DNE

Patches_linux-aws-hwe:
upstream_linux-aws-hwe: released (5.9~rc4)
precise/esm_linux-aws-hwe: DNE
trusty_linux-aws-hwe: DNE
trusty/esm_linux-aws-hwe: DNE
xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
esm-infra/xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
bionic_linux-aws-hwe: DNE
focal_linux-aws-hwe: DNE
groovy_linux-aws-hwe: DNE
devel_linux-aws-hwe: DNE

Patches_linux-azure:
upstream_linux-azure: released (5.9~rc4)
precise/esm_linux-azure: DNE
trusty_linux-azure: ignored (out of standard support)
trusty/esm_linux-azure: ignored (was needs-triage ESM criteria)
xenial_linux-azure: not-affected (4.11.0-1009.9)
esm-infra/xenial_linux-azure: not-affected (4.11.0-1009.9)
bionic_linux-azure: ignored (was needs-triage now end-of-life)
focal_linux-azure: not-affected (5.4.0-1006.6)
groovy_linux-azure: not-affected (5.8.0-1005.5)
devel_linux-azure: not-affected

Patches_linux-azure-4.15:
upstream_linux-azure-4.15: released (5.9~rc4)
precise/esm_linux-azure-4.15: DNE
trusty_linux-azure-4.15: DNE
trusty/esm_linux-azure-4.15: DNE
xenial_linux-azure-4.15: DNE
bionic_linux-azure-4.15: not-affected (4.15.0-1082.92)
focal_linux-azure-4.15: DNE
groovy_linux-azure-4.15: DNE
devel_linux-azure-4.15: DNE

Patches_linux-azure-5.3:
upstream_linux-azure-5.3: released (5.9~rc4)
precise/esm_linux-azure-5.3: DNE
trusty_linux-azure-5.3: DNE
trusty/esm_linux-azure-5.3: DNE
xenial_linux-azure-5.3: DNE
bionic_linux-azure-5.3: ignored (was needs-triage now end-of-life)
focal_linux-azure-5.3: DNE
groovy_linux-azure-5.3: DNE
devel_linux-azure-5.3: DNE

Patches_linux-azure-5.4:
upstream_linux-azure-5.4: released (5.9~rc4)
precise/esm_linux-azure-5.4: DNE
trusty_linux-azure-5.4: DNE
trusty/esm_linux-azure-5.4: DNE
xenial_linux-azure-5.4: DNE
bionic_linux-azure-5.4: not-affected (5.4.0-1020.20~18.04.1)
focal_linux-azure-5.4: DNE
groovy_linux-azure-5.4: DNE
devel_linux-azure-5.4: DNE

Patches_linux-azure-edge:
upstream_linux-azure-edge: released (5.9~rc4)
precise/esm_linux-azure-edge: DNE
trusty_linux-azure-edge: DNE
trusty/esm_linux-azure-edge: DNE
xenial_linux-azure-edge: DNE
bionic_linux-azure-edge: ignored (was needs-triage now end-of-life)
focal_linux-azure-edge: DNE
groovy_linux-azure-edge: DNE
devel_linux-azure-edge: DNE

Patches_linux-gcp:
upstream_linux-gcp: released (5.9~rc4)
precise/esm_linux-gcp: DNE
trusty_linux-gcp: DNE
trusty/esm_linux-gcp: DNE
xenial_linux-gcp: not-affected (4.10.0-1004.4)
esm-infra/xenial_linux-gcp: not-affected (4.10.0-1004.4)
bionic_linux-gcp: ignored (was needs-triage now end-of-life)
focal_linux-gcp: not-affected (5.4.0-1005.5)
groovy_linux-gcp: not-affected (5.8.0-1003.3)
devel_linux-gcp: not-affected

Patches_linux-gcp-4.15:
upstream_linux-gcp-4.15: released (5.9~rc4)
precise/esm_linux-gcp-4.15: DNE
trusty_linux-gcp-4.15: DNE
trusty/esm_linux-gcp-4.15: DNE
xenial_linux-gcp-4.15: DNE
bionic_linux-gcp-4.15: not-affected (4.15.0-1071.81)
focal_linux-gcp-4.15: DNE
groovy_linux-gcp-4.15: DNE
devel_linux-gcp-4.15: DNE

Patches_linux-gcp-5.3:
upstream_linux-gcp-5.3: released (5.9~rc4)
precise/esm_linux-gcp-5.3: DNE
trusty_linux-gcp-5.3: DNE
trusty/esm_linux-gcp-5.3: DNE
xenial_linux-gcp-5.3: DNE
bionic_linux-gcp-5.3: ignored (was needs-triage now end-of-life)
focal_linux-gcp-5.3: DNE
groovy_linux-gcp-5.3: DNE
devel_linux-gcp-5.3: DNE

Patches_linux-gcp-5.4:
upstream_linux-gcp-5.4: released (5.9~rc4)
precise/esm_linux-gcp-5.4: DNE
trusty_linux-gcp-5.4: DNE
trusty/esm_linux-gcp-5.4: DNE
xenial_linux-gcp-5.4: DNE
bionic_linux-gcp-5.4: not-affected (5.4.0-1019.19~18.04.2)
focal_linux-gcp-5.4: DNE
groovy_linux-gcp-5.4: DNE
devel_linux-gcp-5.4: DNE

Patches_linux-gcp-edge:
upstream_linux-gcp-edge: released (5.9~rc4)
precise/esm_linux-gcp-edge: DNE
trusty_linux-gcp-edge: DNE
trusty/esm_linux-gcp-edge: DNE
xenial_linux-gcp-edge: DNE
bionic_linux-gcp-edge: ignored (was needs-triage now end-of-life)
focal_linux-gcp-edge: DNE
groovy_linux-gcp-edge: DNE
devel_linux-gcp-edge: DNE

Patches_linux-gke-4.15:
upstream_linux-gke-4.15: released (5.9~rc4)
precise/esm_linux-gke-4.15: DNE
trusty_linux-gke-4.15: DNE
trusty/esm_linux-gke-4.15: DNE
xenial_linux-gke-4.15: DNE
bionic_linux-gke-4.15: not-affected (4.15.0-1030.32)
focal_linux-gke-4.15: DNE
groovy_linux-gke-4.15: DNE
devel_linux-gke-4.15: DNE

Patches_linux-gke-5.0:
upstream_linux-gke-5.0: released (5.9~rc4)
precise/esm_linux-gke-5.0: DNE
trusty_linux-gke-5.0: DNE
trusty/esm_linux-gke-5.0: DNE
xenial_linux-gke-5.0: DNE
bionic_linux-gke-5.0: not-affected (5.0.0-1011.11~18.04.1)
focal_linux-gke-5.0: DNE
groovy_linux-gke-5.0: DNE
devel_linux-gke-5.0: DNE

Patches_linux-gke-5.3:
upstream_linux-gke-5.3: released (5.9~rc4)
precise/esm_linux-gke-5.3: DNE
trusty_linux-gke-5.3: DNE
trusty/esm_linux-gke-5.3: DNE
xenial_linux-gke-5.3: DNE
bionic_linux-gke-5.3: not-affected (5.3.0-1011.12~18.04.1)
focal_linux-gke-5.3: DNE
groovy_linux-gke-5.3: DNE
devel_linux-gke-5.3: DNE

Patches_linux-oracle:
upstream_linux-oracle: released (5.9~rc4)
precise/esm_linux-oracle: DNE
trusty_linux-oracle: DNE
trusty/esm_linux-oracle: DNE
xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
esm-infra/xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
bionic_linux-oracle: not-affected (4.15.0-1007.9)
focal_linux-oracle: not-affected (5.4.0-1005.5)
groovy_linux-oracle: not-affected (5.8.0-1002.2)
devel_linux-oracle: not-affected

Patches_linux-oracle-5.0:
upstream_linux-oracle-5.0: released (5.9~rc4)
precise/esm_linux-oracle-5.0: DNE
trusty_linux-oracle-5.0: DNE
trusty/esm_linux-oracle-5.0: DNE
xenial_linux-oracle-5.0: DNE
bionic_linux-oracle-5.0: ignored (was needs-triage now end-of-life)
focal_linux-oracle-5.0: DNE
groovy_linux-oracle-5.0: DNE
devel_linux-oracle-5.0: DNE

Patches_linux-oracle-5.3:
upstream_linux-oracle-5.3: released (5.9~rc4)
precise/esm_linux-oracle-5.3: DNE
trusty_linux-oracle-5.3: DNE
trusty/esm_linux-oracle-5.3: DNE
xenial_linux-oracle-5.3: DNE
bionic_linux-oracle-5.3: ignored (was needs-triage now end-of-life)
focal_linux-oracle-5.3: DNE
groovy_linux-oracle-5.3: DNE
devel_linux-oracle-5.3: DNE

Patches_linux-oracle-5.4:
upstream_linux-oracle-5.4: released (5.9~rc4)
precise/esm_linux-oracle-5.4: DNE
trusty_linux-oracle-5.4: DNE
trusty/esm_linux-oracle-5.4: DNE
xenial_linux-oracle-5.4: DNE
bionic_linux-oracle-5.4: not-affected (5.4.0-1019.19~18.04.1)
focal_linux-oracle-5.4: DNE
groovy_linux-oracle-5.4: DNE
devel_linux-oracle-5.4: DNE

Patches_linux-oem:
upstream_linux-oem: released (5.9~rc4)
precise/esm_linux-oem: DNE
trusty_linux-oem: DNE
trusty/esm_linux-oem: DNE
xenial_linux-oem: ignored (was needs-triage now end-of-life)
bionic_linux-oem: not-affected (4.15.0-1002.3)
focal_linux-oem: DNE
groovy_linux-oem: DNE
devel_linux-oem: DNE

Patches_linux-oem-5.6:
upstream_linux-oem-5.6: released (5.9~rc4)
precise/esm_linux-oem-5.6: DNE
trusty_linux-oem-5.6: DNE
trusty/esm_linux-oem-5.6: DNE
xenial_linux-oem-5.6: DNE
bionic_linux-oem-5.6: DNE
focal_linux-oem-5.6: not-affected (5.6.0-1007.7)
groovy_linux-oem-5.6: DNE
devel_linux-oem-5.6: DNE

Patches_linux-oem-osp1:
upstream_linux-oem-osp1: released (5.9~rc4)
precise/esm_linux-oem-osp1: DNE
trusty_linux-oem-osp1: DNE
trusty/esm_linux-oem-osp1: DNE
xenial_linux-oem-osp1: DNE
bionic_linux-oem-osp1: not-affected (5.0.0-1010.11)
focal_linux-oem-osp1: DNE
groovy_linux-oem-osp1: DNE
devel_linux-oem-osp1: DNE

Patches_linux-raspi:
upstream_linux-raspi: released (5.9~rc4)
precise/esm_linux-raspi: DNE
trusty_linux-raspi: DNE
trusty/esm_linux-raspi: DNE
xenial_linux-raspi: DNE
bionic_linux-raspi: DNE
focal_linux-raspi: not-affected (5.4.0-1007.7)
groovy_linux-raspi: not-affected (5.8.0-1003.6)
devel_linux-raspi: not-affected

Patches_linux-raspi2:
upstream_linux-raspi2: released (5.9~rc4)
precise/esm_linux-raspi2: DNE
trusty_linux-raspi2: DNE
trusty/esm_linux-raspi2: DNE
xenial_linux-raspi2: not-affected (4.2.0-1013.19)
bionic_linux-raspi2: not-affected (4.13.0-1005.5)
focal_linux-raspi2: ignored (was needs-triage now end-of-life)
groovy_linux-raspi2: DNE
devel_linux-raspi2: DNE

Patches_linux-raspi2-5.3:
upstream_linux-raspi2-5.3: released (5.9~rc4)
precise/esm_linux-raspi2-5.3: DNE
trusty_linux-raspi2-5.3: DNE
trusty/esm_linux-raspi2-5.3: DNE
xenial_linux-raspi2-5.3: DNE
bionic_linux-raspi2-5.3: not-affected (5.3.0-1017.19~18.04.1)
focal_linux-raspi2-5.3: DNE
groovy_linux-raspi2-5.3: DNE
devel_linux-raspi2-5.3: DNE

Patches_linux-raspi-5.4:
upstream_linux-raspi-5.4: released (5.9~rc4)
precise/esm_linux-raspi-5.4: DNE
trusty_linux-raspi-5.4: DNE
trusty/esm_linux-raspi-5.4: DNE
xenial_linux-raspi-5.4: DNE
bionic_linux-raspi-5.4: not-affected (5.4.0-1013.13~18.04.1)
focal_linux-raspi-5.4: DNE
groovy_linux-raspi-5.4: DNE
devel_linux-raspi-5.4: DNE

Patches_linux-riscv:
upstream_linux-riscv: released (5.9~rc4)
precise/esm_linux-riscv: DNE
trusty_linux-riscv: DNE
trusty/esm_linux-riscv: DNE
xenial_linux-riscv: DNE
bionic_linux-riscv: DNE
focal_linux-riscv: not-affected (5.4.0-24.28)
groovy_linux-riscv: not-affected (5.8.0-3.3)
devel_linux-riscv: not-affected

Patches_linux-snapdragon:
upstream_linux-snapdragon: released (5.9~rc4)
precise/esm_linux-snapdragon: DNE
trusty_linux-snapdragon: DNE
trusty/esm_linux-snapdragon: DNE
xenial_linux-snapdragon: not-affected (4.4.0-1013.15)
bionic_linux-snapdragon: not-affected (4.4.0-1077.82)
focal_linux-snapdragon: DNE
groovy_linux-snapdragon: DNE
devel_linux-snapdragon: DNE