CVE-2020-10751

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-10751
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10751.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-10751
Downstream
Related
Published
2020-05-26T15:15:10.727Z
Modified
2026-03-15T15:06:56.530030Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fb73974172ffaaf57a7c42f35424d9aece1a5af6
Type
GIT
Repo
https://github.com/selinuxproject/selinux-kernel
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.7"
        }
    ]
}

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10751.json"