Home

CVE-2020-10768

Description

A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being force disabled when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.033

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-debuginfo-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debuginfo-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debugsource-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-debuginfo-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-4.12.14-122.26.1.noarch.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-macros-4.12.14-122.26.1.noarch.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-4.12.14-122.26.1.noarch.rpmLinux
SUSE-SU-2020:1693-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-4.12.14-122.26.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.19.1.x86_64.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.19.1.noarch.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.19.1.noarch.rpmLinux
SUSE-SU-2020:1699-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.19.1.x86_64.rpmLinux
Linux kernel (USN-4427-1) linux-image-aws_4.4.0.1111.116_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-kvm_4.4.0.1077.75_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-generic_4.4.0.186.192_i386.debLinux
Linux kernel (USN-4427-1) linux-image-generic_4.4.0.186.192_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-virtual_4.4.0.186.192_i386.debLinux
Linux kernel (USN-4427-1) linux-image-virtual_4.4.0.186.192_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-lowlatency_4.4.0.186.192_i386.debLinux
Linux kernel (USN-4427-1) linux-image-lowlatency_4.4.0.186.192_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-1077-kvm_4.4.0-1077.84_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-1111-aws_4.4.0-1111.123_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-186-generic_4.4.0-186.216_i386.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-186-generic_4.4.0-186.216_amd64.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-186-lowlatency_4.4.0-186.216_i386.debLinux
Linux kernel (USN-4427-1) linux-image-4.4.0-186-lowlatency_4.4.0-186.216_amd64.debLinux
Linux kernel for Google Container Engine (GKE) systems (USN-4439-1) linux-image-gke-5.0_5.0.0.1045.30_amd64.debLinux
Linux kernel for Google Container Engine (GKE) systems (USN-4439-1) linux-image-oem-osp1_5.0.0.1065.63_amd64.debLinux
Linux kernel for Google Container Engine (GKE) systems (USN-4439-1) linux-image-5.0.0-1045-gke_5.0.0-1045.46_amd64.debLinux
Linux kernel for Google Container Engine (GKE) systems (USN-4439-1) linux-image-5.0.0-1065-oem-osp1_5.0.0-1065.70_amd64.debLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update bpftool-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-abi-whitelists-4.18.0-193.13.2.el8_2.noarch.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-core-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-cross-headers-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-debug-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-debug-core-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-debug-devel-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-debug-modules-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-debug-modules-extra-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-devel-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-doc-4.18.0-193.13.2.el8_2.noarch.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-headers-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-modules-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-modules-extra-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-tools-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update kernel-tools-libs-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update perf-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3010) kernel security, bug fix, and enhancement update python3-perf-4.18.0-193.13.2.el8_2.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193-1-5.el8.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193-debugsource-1-5.el8.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193_1_2-1-3.el8_2.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193_1_2-debugsource-1-3.el8_2.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193_6_3-1-2.el8_2.x86_64.rpmLinux
(RHSA-2020:3073) kpatch-patch security update kpatch-patch-4_18_0-193_6_3-debugsource-1-2.el8_2.x86_64.rpmLinux
Linux kernel (USN-4483-1) linux-image-aws_5.4.0.1022.23_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-gcp_5.4.0.1022.9_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-gcp_5.4.0.1022.20_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-gke_5.4.0.1022.20_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-kvm_5.4.0.1021.20_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-oem_5.4.0.45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-azure_5.4.0.1023.7_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-azure_5.4.0.1023.22_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-oracle_5.4.0.1022.7_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-oracle_5.4.0.1022.20_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-generic_5.4.0.45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-gke-5.4_5.4.0.1022.9_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-virtual_5.4.0.45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-aws-edge_5.4.0.1022.8_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-oem-osp1_5.4.0.45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-lowlatency_5.4.0.45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-aws_5.4.0-1022.22_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-aws_5.4.0-1022.22~18.04.1_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-gcp_5.4.0-1022.22_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-gcp_5.4.0-1022.22~18.04.1_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1023-azure_5.4.0-1023.23_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1023-azure_5.4.0-1023.23~18.04.1_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-45-generic_5.4.0-45.49_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-oracle_5.4.0-1022.22_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-1022-oracle_5.4.0-1022.22~18.04.1_amd64.debLinux
Linux kernel (USN-4483-1) linux-image-5.4.0-45-lowlatency_5.4.0-45.49_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-gcp_4.15.0.1081.83_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-gke_4.15.0.1067.71_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-gke_4.15.0.1081.83_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-kvm_4.15.0.1072.68_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-oem_4.15.0.1094.98_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-azure_4.15.0.1093.88_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-oracle_4.15.0.1051.42_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-aws-hwe_4.15.0.1080.77_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-generic_4.15.0.115.103_i386.debLinux
Linux kernel (USN-4485-1) linux-image-generic_4.15.0.115.103_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-virtual_4.15.0.115.103_i386.debLinux
Linux kernel (USN-4485-1) linux-image-virtual_4.15.0.115.103_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-gke-4.15_4.15.0.1067.71_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-azure-edge_4.15.0.1093.88_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-lowlatency_4.15.0.115.103_i386.debLinux
Linux kernel (USN-4485-1) linux-image-lowlatency_4.15.0.115.103_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-aws-lts-18.04_4.15.0.1080.82_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-gcp-lts-18.04_4.15.0.1081.99_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1067-gke_4.15.0-1067.70_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1072-kvm_4.15.0-1072.73_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1080-aws_4.15.0-1080.84_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1080-aws_4.15.0-1080.84~16.04.1_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1081-gcp_4.15.0-1081.92_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1081-gcp_4.15.0-1081.92~16.04.1_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1094-oem_4.15.0-1094.104_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-azure-lts-18.04_4.15.0.1093.67_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-oracle-lts-18.04_4.15.0.1051.62_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1093-azure_4.15.0-1093.103_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1093-azure_4.15.0-1093.103~16.04.1_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1051-oracle_4.15.0-1051.55_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-1051-oracle_4.15.0-1051.55~16.04.1_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-115-generic_4.15.0-115.116_i386.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-115-generic_4.15.0-115.116_amd64.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-115-lowlatency_4.15.0-115.116_i386.debLinux
Linux kernel (USN-4485-1) linux-image-4.15.0-115-lowlatency_4.15.0-115.116_amd64.debLinux
Kernel-uek update (ELSA-2020-5914) kernel-uek-5.4.17-2036.100.6.1.el8uek.x86_64.rpmLinux
Kernel-uek-debug update (ELSA-2020-5914) kernel-uek-debug-5.4.17-2036.100.6.1.el8uek.x86_64.rpmLinux
Kernel-uek-debug-devel update (ELSA-2020-5914) kernel-uek-debug-devel-5.4.17-2036.100.6.1.el8uek.x86_64.rpmLinux
Kernel-uek-devel update (ELSA-2020-5914) kernel-uek-devel-5.4.17-2036.100.6.1.el8uek.x86_64.rpmLinux
Kernel-uek-doc update (ELSA-2020-5914) kernel-uek-doc-5.4.17-2036.100.6.1.el8uek.noarch.rpmLinux
kernel Security Update (ALAS-2020-1465) kernel-livepatch-4.14.186-146.268-1.0-0.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234