1. Home
  2. Vulnerabilities
  3. CVE-2020-12652

CVE-2020-12652

CVSS v3.1 4.1 (Medium)
41% Progress
CVSS v2.0 4.7 (Medium)
47% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 1
Advisories 17
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."

Weaknesses
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2020-05-05 05:15:11
(4 years ago)
Updated Date
2020-06-13 09:15:12
(4 years ago)

Affected Products

Linux

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 5.4.14 version cpe:2.3:o:linux:linux_kernel < 5.4.14