The _mptctlioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
[
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_do_reset"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-0888da60",
"deprecated": false,
"digest": {
"function_hash": "330700654817186386494314827735678076578",
"length": 786.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_mpt_command"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-0a42782a",
"deprecated": false,
"digest": {
"function_hash": "238819309986058925633842576189938349228",
"length": 614.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "compat_mptfwxfer_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-0f4f472e",
"deprecated": false,
"digest": {
"function_hash": "263672427269204159310850276030340242533",
"length": 867.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_do_fw_download"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-28c37cfa",
"deprecated": false,
"digest": {
"function_hash": "327233233957976950565136919794151515288",
"length": 4696.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_replace_fw"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-2a48a3c1",
"deprecated": false,
"digest": {
"function_hash": "147800826807688019799429122497523590093",
"length": 1154.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_gettargetinfo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-56c728fe",
"deprecated": false,
"digest": {
"function_hash": "95443790454442169710411826401114314859",
"length": 2283.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Line",
"id": "CVE-2020-12652-5740ba62",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"112502706992522314088524934952483668497",
"206622269676354372746888011049832349826",
"172419880338545849553295870017288527371",
"248957149485274516850686674893990569421",
"323259213856128044293288022941845289885",
"115859342344437268431587245472485042921",
"218712193996147760714575937569718608939",
"213659321779962774641969385417257097276",
"40337286060273503106023768133850557801",
"266796919167495954265752474375355292366",
"203942706861768924347846749680791078134",
"70032286366869135924519328167553201574",
"241643159649306271318152612942059746241",
"235640354117196477105082685307281012091",
"198385516406770220003292067737451357978",
"38239909057486424977340839230143164896",
"284597068730381757872602821268916431526",
"276692345289568964143604258960750730971",
"79269102479689010873422040418820027563",
"136315593226444468358905981412089037978",
"28550376936394777896768012948140643357",
"55226334762105676917398192662792554357",
"261446169035332201726810836624523970243",
"312879758033561777053708568314809358251",
"99867906015144346083645672249216459081",
"231711925530720378211802469778811591605",
"166026415450042742481168065088152958708",
"220365168916575899841836491869412019049",
"142942804386168414735557646343291557201",
"332459454153600373562735330146995453301",
"30741698556758385273408802777112909066",
"226455607162628543269543101105064474720",
"111065138501203576767646524351414887136",
"118178201480998864608212903205174305470",
"266398347868860774600872431443842440560",
"226265172223876963962878138473881992994",
"149759767071114806230161438750416834928",
"104308659510784471627133803104484816338",
"197057224480071091050306076866746494762",
"114544514730621240868538626748226273873",
"104346685764026710549749626448775178357",
"334065950072332198066224569654449978925",
"304201097348513022947739214193899054876",
"122623685094116256857490470372859894808",
"98011093975838495738382957684338510458",
"86233437866229442691770296207069517002",
"167466094639379315286698744386112781552",
"133448539852273775568989320177430362348",
"261888977660920266135846129852849478977",
"87826404917912231313974068353827697692",
"217051557215061367965737469440668278599",
"120701424465915945653701306148463889321",
"325626380834311163349288600235256563693",
"186915622761155275982682855931384039729",
"274605132502423775779565137589735676299",
"250421248414666977177119715691316122992",
"83038014014029238468897721587747897914",
"179321837334845301004854206066989524121",
"233703801267851411738853209983579601654",
"171266371003223330971500192033746973167",
"215981361000814395111653501213867670310",
"89251186448798765135631707816942570104",
"114323081375843903348631170256010795334",
"78802907171607813406087326218306332095",
"198430255665965315370014618668164810547",
"60198464970176247959733507614342710151",
"59554520571150243868661210342236607371",
"166583880815380286048249360241058152099",
"255260318319434285945136289386919523351",
"33085971154259980224093066517402475619",
"43204296832666586868512643279264603213",
"40925052756616989654083556906740257267",
"66854981995002322075853807976408899285",
"300527926046626438623571922349109290254",
"329961717038758694707965382998375932544",
"221894217363504902466224807360746871926",
"69433977207147754809787181473979759231",
"304896540792350694825877138647996196654",
"110061534448632686951750482381488872897",
"133348961155184135555826504654018360711",
"54501414877437538386744530313215947898",
"83897251973403663579469380229636826079",
"306265997542362116458746638342455366011",
"337217157645422038617242901194456366755",
"217331417486063777589586666075324994923",
"135610150798988868959979364675279992449",
"90880077774973668336450792588911157881",
"31025095006768995494945252084217641415",
"135837551307208360663897568239056848239",
"311797409702597519187940825630719368904",
"166261965803952878788663320965657607854",
"144977669819504030705924063403347670456",
"312230628046723466974414509245906671518",
"14656421210965131539215381203764953218",
"119965739896565281280982521689494022435",
"68690855916229719514776912388501562483",
"123208400074229583447376074438375167114",
"227187363266963081397534395063959173700",
"58332841130923392862381453984347004975",
"322482942354985107392030173549376989072",
"291610859734108975178924536698458181542",
"4279926562425008633175202659773849745",
"323956930829800213050056848250056362370",
"307933212985706749011173306463324520939",
"147087940890040074875396959670278410518",
"154688776054135128833520176343179454",
"262272561643672852219688762105505365743",
"250728800465633012489418759632437842090",
"218611804937707618619409575162386381763",
"185410801609610778669525713152949309988",
"177628502213104625564674320377657124075",
"190533706514082071469969590822081145821",
"13657312018885139520332799882409596079",
"336462128121668104076651630059865039435",
"99978538645990854173677179615811597606",
"124147180106330249739651563312528082667",
"167166378525641002955322068922431189624",
"37521463437291249044526302671173768875",
"286699396649193102443898279616741452704",
"90756769978882201956392295912887315924",
"124248360924345547327168912738233084871",
"262789383339141771937715572388571449863",
"135939245191784344576599838194079645320",
"322162191126650350923416324392136883355",
"54099568587423210962033788982019493292",
"180297876034299960399829103357451905",
"287633741442323669231806925535037253739",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"281592853827459273314098132603091285655",
"302755905764836749550701552295947320648",
"141021739417136611565256216214246239670",
"325110698172193262052544802425023642035",
"293959876726794333873422003016659669190",
"225102696957191582717822235328524825370",
"176652487346415830048799957826066986846",
"259256169639191054988742051512382406847",
"144595198882181835178419008578535534593",
"34743772985718781757547095601161959275",
"263368911366867456753442311349057375096",
"261785459020793938018518444789191064160",
"161769383759100825225559036249905376988",
"41190003133710827056542505080330794549",
"58083287004192740607591378410435574293",
"309242758872877209878732524593646333867",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"141424149984200206590268559223470198574",
"267881734816603535949433859590786697931",
"46699992531957348810899019861082772541",
"245449048545749910177872884061186526415",
"146481851574208266964046741439366317871",
"43661678424476380823720131886946744187",
"256831182510863213430374563004311329482",
"230835733513851362869293568295732650871",
"5182212891795684227463477683567337969",
"20699254912662958317363993996086410847",
"255323542427850811546292884431476357222",
"332469337248693789450853008199293240865",
"97666638269756071341783063993453748691",
"29123539709192993495290562421124027113",
"331203172368061910295982805651136437040",
"206847743785234129939193060396619278190",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"91876365120368136165078487392682016668",
"135819957198401769333675366408641174932",
"11672455969021767223426829295189404788",
"215352302298164160912626739782384894966",
"308645192481651864879256171955520832914",
"238054917977464910332043784306978226128",
"82061619265878620703227106640278961735",
"111774684421191950433636000543700733469",
"159488289495059917331716226311263505548",
"223944765733592754067681012607130905460",
"199042802219382898259654138220776338734",
"132174856467207595400124682417500189896",
"27777155056199500908641134350643602300",
"68451728736483153089291766767961105307",
"319606181403403404892255950444352300450",
"31055889842374742355967304406774122748",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"58647162025831444928575572710847230890",
"101756687033322440955506962677234041772",
"129791179037027232460321925595148569071",
"99687498307316734226097589084918954201",
"228912067248082824417992953716405003487",
"290918278508344603313421322553531909018",
"220457162370622894217040895321938525876",
"84453953953257584993391579924394295416",
"141504459965966725192754840473605399213",
"130450008125895762277336417300670180909",
"74653239166153596621769600363808187937",
"275413372047837052573184972502455802005",
"225454390007682568035633067644595639547",
"257995697085311413587653617297450604982",
"174482710243861425917497504381810227230",
"40171370549486178360998409083459654553",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"36443169554680407224078286668872660924",
"14634286950514992817153235003533482750",
"258200436001985907930117759729544903387",
"241737591891527846162740260714694962180",
"92180243248655636161538548614348569071",
"12676181084575096546125411535502356579",
"71207926154431269843575555639625034588",
"166991696258258108991097046804055479738",
"10422321184366905940634688754712244967",
"81496442518283920583737100145765750611",
"48737585404004829684943613688136169380",
"153784700423999757035617423789831216538",
"216992332052698802888483390372271972150",
"309519610360450784252711806464112486710",
"112648951157627474987150942183294934017",
"14616010206112058150261600983949765899",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"148078736606942781651035494819377972182",
"301407678019536048559751490234602157082",
"101746550720269190469082641132864207050",
"310252520711583350956262203548939846147",
"252057398886990401678356609662344547962",
"7613188209859048277894730401170148884",
"274652840432210505995717654154353885837",
"336308663557419382887132469880096937911",
"170703626828928330316202832712581597207",
"9682149321208398967300776045217813214",
"257632983084626943415217449159587188365",
"335692166439231079375868858388260237692",
"67852931408000575127069453271833935637",
"247436671622349203671912562818278058801",
"76409466945945905484778164583096545537",
"141794001652823854605890542797023051232",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"18747319801705129512700978495611407112",
"138719207598949346735399385358385091961",
"101027586893413799779950290464766151578",
"204316753637983490724137011968353741011",
"279929047359255225222866190237449333492",
"181124959925103583114879246668302204665",
"223528026007291700881443654172147180254",
"299508085525735841076193521403481088397",
"158614955369917150488169955344709819373",
"314556351461571270352034219624653515589",
"55148744657130683835301026296006759087",
"189237684690006507870845915890693113804",
"306871882138547138223119465418884520523",
"169792712897878762367163518313212159271",
"58570722323733439744625525015156475478",
"79652112158759350826050016188558718091",
"294123181378470884201570135251752784682",
"126256318830878677013926426151962046505",
"200506730320311359349787854295785608744",
"133016907778219581067044856512680660123",
"274723172827290204560574066373490743473",
"87577289217118529484087973030191611160",
"140199737603877952885463796217871255151",
"293214128698374175372654360528922346611",
"219586437598970938046175727985101847612",
"182258371288049879212390211351780185086",
"283885909396248138623357210950537450374",
"17080152463132510441367214517274922278",
"296202880990351307732379254396683083872",
"135042122439145318387904069261993852692",
"212745466397091357899973805045565446320",
"295481121750065747129757405581161325097",
"184676518200901771574049715110610714253",
"278890771554558828499277940690143833892",
"58726281470698429753094334722331466730",
"121015957013232358719816854134632115408",
"98087935189318042467595629463070073087",
"168862673003319752915894251442455174899",
"221805565371787935673195435099243842745",
"72143351560224208245674069345939361393",
"93973861358215924610640345548690050272",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"287308095857374769484804558296948958176",
"170346082250469927936299336467694351312",
"33181000735403841705110425307344052797",
"51188466419840132159376363867701874121",
"323624234054059569352561237795673301115",
"85262545015343890428026602681335479011",
"104497240663373669326996915838348679621",
"282348541797408382272098790039384983435",
"132380493851208791800928237976540899789",
"105400597097525347170568705302096576453",
"52013864178769006788910248653166188742",
"278389410540590025123824066812579629013",
"308953042957671633654574640369699896484",
"96127776334932487615409753390392202556",
"50360702692326970353463620667448080375",
"20129663911660733849455007148471683401",
"48116675301345010251981069823884639026",
"63253721556584355940369711548715608837",
"7727999013067766739576348666917111475",
"27942826639218163063462229758521097925",
"55069077968770155335016661342218621290",
"213060085182984823496979219775402235894",
"179238364362625242395067085437811050944",
"150757624889365765054856932407725952654",
"391572698374241562679559527432439333",
"57262981073024773876933594681931000585",
"25232517731642296280181995865654840971",
"16678138794973158365028763135484689127",
"330648126622453107536111007211095548893",
"140713682009092487918592870116607324574",
"196609567018531572589729335998785773940",
"164374326437497907123187189643541297855",
"208019635047514134222831185038734609802",
"31930571290997263702976682044777932319",
"216501554787547690576381938659120121324",
"82907374296396486020912563743204641024"
]
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_do_mpt_command"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-5d2a4163",
"deprecated": false,
"digest": {
"function_hash": "217663796907205373490405140325219056593",
"length": 12268.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_readtest"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-63797113",
"deprecated": false,
"digest": {
"function_hash": "172281986248268459947569547379961144581",
"length": 1207.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_eventenable"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-82259c91",
"deprecated": false,
"digest": {
"function_hash": "83458429063667478523855254305283072556",
"length": 1040.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_eventquery"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-94d6a867",
"deprecated": false,
"digest": {
"function_hash": "273964814676839383556317594806294397334",
"length": 990.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_getiocinfo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-9db50636",
"deprecated": false,
"digest": {
"function_hash": "281719118439307178289521455171265188610",
"length": 3183.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "compat_mpt_command"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-a46d74d5",
"deprecated": false,
"digest": {
"function_hash": "88507674649175008630440618599409173205",
"length": 1413.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_fw_download"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-a5be5c42",
"deprecated": false,
"digest": {
"function_hash": "3700803554344872359248703049917376852",
"length": 358.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_hp_targetinfo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-b52afbef",
"deprecated": false,
"digest": {
"function_hash": "329494741393997818222153455841213497327",
"length": 3792.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_hp_hostinfo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-bbe5bb98",
"deprecated": false,
"digest": {
"function_hash": "186852523230348681261278270910059264851",
"length": 5164.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "mptctl_eventreport"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-be1d0d49",
"deprecated": false,
"digest": {
"function_hash": "285105243657162826046716479216008960671",
"length": 1242.0
}
},
{
"signature_version": "v1",
"target": {
"file": "drivers/message/fusion/mptctl.c",
"function": "__mptctl_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@28d76df18f0ad5bcf5fa48510b225f0ed262a99b",
"signature_type": "Function",
"id": "CVE-2020-12652-bf6c68b8",
"deprecated": false,
"digest": {
"function_hash": "264499455664901591127429173942373744152",
"length": 1748.0
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-12652.json"