CVEvulnerability
CVE-2020-27815
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.1 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-119, CWE-787
Description
A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Affected configurations
• linux linux kernel (> 4.4.249)
• linux linux kernel (>= 4.5 < 4.9.249)
• linux linux kernel (>= 4.10 < 4.14.213)
• linux linux kernel (>= 4.15 < 4.19.164)
• linux linux kernel (>= 4.20 < 5.4.86)
• linux linux kernel (>= 5.5 < 5.10.4)
• debian debian linux 9.0
• debian debian linux 10.0
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h300e firmware
• netapp h500e firmware
• netapp h700e firmware
• netapp h410s firmware
• netapp h410c firmware
• netapp aff a250 firmware
• netapp fas500f firmware
Related
References
- http://www.openwall.com/lists/oss-security/2020/11/30/5 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/12/28/1 Exploit, Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1897668%2C Issue Tracking
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61b3e4839007668360ed8b87d7da96d2e59fc6c Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210702-0004/ Third Party Advisory
- https://www.debian.org/security/2021/dsa-4843 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/11/30/5%2C Mailing List
- https://www.openwall.com/lists/oss-security/2020/12/28/1%2C Mailing List
- http://www.openwall.com/lists/oss-security/2020/11/30/5 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/12/28/1 Exploit, Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1897668%2C Issue Tracking
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61b3e4839007668360ed8b87d7da96d2e59fc6c Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210702-0004/ Third Party Advisory
- https://www.debian.org/security/2021/dsa-4843 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/11/30/5%2C Mailing List
- https://www.openwall.com/lists/oss-security/2020/12/28/1%2C Mailing List