CVE-2020-27815

Description

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.182

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-4749-1) linux-image-gcp_4.15.0.1093.94_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-gke_4.15.0.1079.83_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-gke_4.15.0.1093.94_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-kvm_4.15.0.1085.81_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-oem_4.15.0.136.132_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-azure_4.15.0.1108.99_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-oracle_4.15.0.1065.53_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-aws-hwe_4.15.0.1094.87_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-generic_4.15.0.136.123_i386.debLinux
Linux kernel (USN-4749-1) linux-image-generic_4.15.0.136.123_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-virtual_4.15.0.136.123_i386.debLinux
Linux kernel (USN-4749-1) linux-image-virtual_4.15.0.136.123_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-dell300x_4.15.0.1012.14_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-gke-4.15_4.15.0.1079.83_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-lowlatency_4.15.0.136.123_i386.debLinux
Linux kernel (USN-4749-1) linux-image-lowlatency_4.15.0.136.123_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-aws-lts-18.04_4.15.0.1094.97_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-gcp-lts-18.04_4.15.0.1093.111_amd64.debLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.50.1.noarch.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.50.1.noarch.rpmLinux
SUSE-SU-2021:1175-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.50.1.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-debuginfo-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debuginfo-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debugsource-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-debuginfo-4.12.14-122.66.2.x86_64.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-4.12.14-122.66.2.noarch.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-macros-4.12.14-122.66.2.noarch.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-4.12.14-122.66.2.noarch.rpmLinux
SUSE-SU-2021:1210-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-4.12.14-122.66.2.x86_64.rpmLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1079-gke_4.15.0-1079.84_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1085-kvm_4.15.0-1085.87_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1093-gcp_4.15.0-1093.106_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1094-aws_4.15.0-1094.101_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1108-azure_4.15.0-1108.120_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1065-oracle_4.15.0-1065.73_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-136-generic_4.15.0-136.140_i386.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-136-generic_4.15.0-136.140_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-1012-dell300x_4.15.0-1012.16_amd64.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-136-lowlatency_4.15.0-136.140_i386.debLinux
Linux kernel (USN-4749-1) linux-image-4.15.0-136-lowlatency_4.15.0-136.140_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1033-kvm_5.4.0-1033.34_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1036-gke_5.4.0-1036.38~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1037-gcp_5.4.0-1037.40_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1037-gcp_5.4.0-1037.40~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1038-aws_5.4.0-1038.40_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1038-aws_5.4.0-1038.40~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1010-gkeop_5.4.0-1010.11_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1010-gkeop_5.4.0-1010.11~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1040-azure_5.4.0-1040.42_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1040-azure_5.4.0-1040.42~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-generic_5.4.0-66.74_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-generic_5.4.0-66.74~18.04.2_i386.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-generic_5.4.0-66.74~18.04.2_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1038-oracle_5.4.0-1038.41_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-1038-oracle_5.4.0-1038.41~18.04.1_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-lowlatency_5.4.0-66.74_amd64.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-lowlatency_5.4.0-66.74~18.04.2_i386.debLinux
Linux kernel (USN-4750-1) linux-image-5.4.0-66-lowlatency_5.4.0-66.74~18.04.2_amd64.debLinux
Linux kernel (USN-4751-1) linux-image-5.8.0-44-generic_5.8.0-44.50~20.04.1_amd64.debLinux
Linux kernel (USN-4751-1) linux-image-5.8.0-44-lowlatency_5.8.0-44.50~20.04.1_amd64.debLinux
Linux kernel for OEM systems (USN-4752-1) linux-image-5.6.0-1048-oem_5.6.0-1048.52_amd64.debLinux
kernel Security Update (ALAS-2021-1588) kernel-livepatch-4.14.214-160.339-1.0-0.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234