CVEvulnerability

CVE-2020-8835

7.8 HIGH Published 2020-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-125, CWE-787

Description

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

Affected configurations

• linux linux kernel (>= 5.4.7 < 5.4.29) • linux linux kernel (>= 5.5.0 < 5.5.14) • linux linux kernel (>= 5.6 < 5.6.1) • fedoraproject fedora 30 • fedoraproject fedora 31 • fedoraproject fedora 32 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • netapp cloud backup • netapp hci management node • netapp solidfire • netapp steelstore cloud integrated storage • netapp a700s firmware • netapp 8300 firmware • netapp 8700 firmware • netapp a400 firmware • netapp a320 firmware • netapp c190 firmware • netapp a220 firmware • netapp fas2720 firmware • netapp fas2750 firmware • netapp a800 firmware • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • netapp h610c firmware • netapp h610s firmware • netapp h615c firmware

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-787 Out-of-bounds Write weakness

Referenced by CWE · observed example (1)

  • CWE-1335 Incorrect Bitwise Shift of Integer weakness

References