CVE-2020-25212
Description
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
Risk Information
Base Score
7.0
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.081
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-4527-1) linux-image-aws_4.4.0.1114.119_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-generic_4.4.0.190.196_i386.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-generic_4.4.0.190.196_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-virtual_4.4.0.190.196_i386.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-virtual_4.4.0.190.196_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-lowlatency_4.4.0.190.196_i386.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-lowlatency_4.4.0.190.196_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-4.4.0-1114-aws_4.4.0-1114.127_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-4.4.0-190-generic_4.4.0-190.220_i386.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-4.4.0-190-generic_4.4.0-190.220_amd64.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-4.4.0-190-lowlatency_4.4.0-190.220_i386.deb | Linux |
| Linux kernel (USN-4527-1) linux-image-4.4.0-190-lowlatency_4.4.0-190.220_amd64.deb | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.31.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.31.1.noarch.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.31.1.noarch.rpm | Linux |
| SUSE-SU-2020:2907-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.31.1.x86_64.rpm | Linux |
| Linux kernel (USN-4578-1) linux-image-gcp_4.15.0.1086.87_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-gke_4.15.0.1072.76_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-gke_4.15.0.1086.87_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-kvm_4.15.0.1077.73_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-oem_4.15.0.120.121_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-oem_4.15.0.1099.103_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-azure_4.15.0.1098.92_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-oracle_4.15.0.1056.46_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-aws-hwe_4.15.0.1085.81_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-generic_4.15.0.121.108_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-generic_4.15.0.121.108_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-virtual_4.15.0.121.108_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-virtual_4.15.0.121.108_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-gke-4.15_4.15.0.1072.76_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-lowlatency_4.15.0.121.108_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-lowlatency_4.15.0.121.108_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-aws-lts-18.04_4.15.0.1086.88_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-gcp-lts-18.04_4.15.0.1086.104_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1072-gke_4.15.0-1072.76_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1077-kvm_4.15.0-1077.79_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1085-aws_4.15.0-1085.90~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1086-aws_4.15.0-1086.91_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1086-gcp_4.15.0-1086.98_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1086-gcp_4.15.0-1086.98~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1099-oem_4.15.0-1099.109_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-azure-lts-18.04_4.15.0.1099.72_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-oracle-lts-18.04_4.15.0.1057.67_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1098-azure_4.15.0-1098.109~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1099-azure_4.15.0-1099.110_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-generic-hwe-16.04_4.15.0.120.121_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-generic-hwe-16.04_4.15.0.120.121_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-virtual-hwe-16.04_4.15.0.120.121_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-virtual-hwe-16.04_4.15.0.120.121_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1056-oracle_4.15.0-1056.61~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-1057-oracle_4.15.0-1057.62_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-120-generic_4.15.0-120.122~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-120-generic_4.15.0-120.122~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-121-generic_4.15.0-121.123_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-121-generic_4.15.0-121.123_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-lowlatency-hwe-16.04_4.15.0.120.121_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-lowlatency-hwe-16.04_4.15.0.120.121_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-120-lowlatency_4.15.0-120.122~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-120-lowlatency_4.15.0-120.122~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-121-lowlatency_4.15.0-121.123_i386.deb | Linux |
| Linux kernel (USN-4578-1) linux-image-4.15.0-121-lowlatency_4.15.0-121.123_amd64.deb | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-debuginfo-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debuginfo-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debugsource-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-debuginfo-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-4.12.14-122.46.1.noarch.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-macros-4.12.14-122.46.1.noarch.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-4.12.14-122.46.1.noarch.rpm | Linux |
| SUSE-SU-2020:2981-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-4.12.14-122.46.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.34.1.x86_64.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.34.1.noarch.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.34.1.noarch.rpm | Linux |
| SUSE-SU-2020:3281-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.34.1.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update bpftool-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2020:5437) kernel security and bug fix update python-perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Bpftool update (ELSA-2020-5437) bpftool-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel update (ELSA-2020-5437) kernel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-abi-whitelists update (ELSA-2020-5437) kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| Kernel-debug update (ELSA-2020-5437) kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-debug-devel update (ELSA-2020-5437) kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-devel update (ELSA-2020-5437) kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-doc update (ELSA-2020-5437) kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| Kernel-headers update (ELSA-2020-5437) kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-tools update (ELSA-2020-5437) kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-tools-libs update (ELSA-2020-5437) kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Kernel-tools-libs-devel update (ELSA-2020-5437) kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Perf update (ELSA-2020-5437) perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Python-perf update (ELSA-2020-5437) python-perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update bpftool-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-abi-stablelists-4.18.0-305.el8.noarch.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-core-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-cross-headers-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-debug-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-debug-core-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-debug-devel-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-debug-modules-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-debug-modules-extra-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-devel-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-doc-4.18.0-305.el8.noarch.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-headers-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-modules-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-modules-extra-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-tools-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update kernel-tools-libs-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update perf-4.18.0-305.el8.x86_64.rpm | Linux |
| (RHSA-2021:1578) kernel security, bug fix, and enhancement update python3-perf-4.18.0-305.el8.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update bpftool-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-abi-whitelists-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-debug-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-debug-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-doc-3.10.0-1160.11.1.el7.noarch.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-headers-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-tools-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-tools-libs-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update kernel-tools-libs-devel-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| (CESA-2020:5437) kernel security and bug fix update python-perf-3.10.0-1160.11.1.el7.x86_64.rpm | Linux |
| Linux kernel for OEM systems (USN-4752-1) linux-image-5.6.0-1048-oem_5.6.0-1048.52_amd64.deb | Linux |
| kernel Security Update (ALAS-2020-1495) kernel-livepatch-4.14.198-152.320-1.0-0.amzn2.x86_64.rpm | Linux |
| Out-of-bounds Write Vulnerability (CVE-2020-25212) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234