Stack Information Leak Flaw in Linux Kernel Memory Manager
CVE-2020-10773

4.4MEDIUM

Key Information:

Vendor

[unknown]

Status
Kernel
Vendor
CVE Published:
10 September 2020

What is CVE-2020-10773?

A stack information leak vulnerability exists in the Linux kernel's memory management system, particularly affecting s390 and s390x architectures. This issue arises from improper handling of data written to the /proc/sys/vm/cmm_timeout file, resulting in unintended exposure of sensitive kernel data to local users. By exploiting this flaw, an attacker could gain insights into internal kernel operations, potentially leading to further security risks.

Affected Version(s)

kernel kernel-5.4-rc6

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10773
x_refsource_CONFIRM
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/...
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.