CVE-2020-10732

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

References

Affected packages

Git / github.com/ruscur/linux

Affected ranges

Type: GIT
Repo: https://github.com/ruscur/linux
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a

Type: GIT
Repo: https://github.com/ruscur/linux
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.16.85"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.4"
            },
            {
                "fixed": "4.4.226"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.9"
            },
            {
                "fixed": "4.9.226"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.14"
            },
            {
                "fixed": "4.14.183"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.19"
            },
            {
                "fixed": "4.19.126"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.4"
            },
            {
                "fixed": "5.4.44"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.6"
            },
            {
                "fixed": "5.6.16"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "9.5"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10732.json"

vanir_signatures

[
    {
        "target": {
            "file": "fs/binfmt_elf.c"
        },
        "id": "CVE-2020-10732-511d5fc3",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "110497612160530527403063993914174505403",
                "200521148035237612312138835802718584258",
                "251565754673033647669578957977982994687",
                "141562414025503136830371800170307866478"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a"
    }
]