CVE-2020-8992

CVSS v3.1 5.5 (Medium)

CVSS v2.0 4.9 (Medium)

EPSS 0.04 % (15^th)

Affected Products 11

Advisories 20

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

Weaknesses

CWE-400: Uncontrolled Resource Consumption
CWE-834: Excessive Iteration

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2020-02-14 05:15:13
(4 years ago)
Updated Date: 2022-04-27 15:31:08
(2 years ago)

Affected Products

Canonical

Ubuntu Linux

Linux

Linux Kernel

Netapp

Opensuse

Leap

Configuration #1

AND

		CPE23	From	Up To
OR
	Linux Kernel 5.5.3 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 5.5.3

Configuration #2

AND

		CPE23
OR
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
OR
	Running on/with
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
OR
	Running on/with
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
OR
	Running on/with
	Canonical Ubuntu Linux 19.10	cpe:2.3:o:canonical:ubuntu_linux:19.10

Configuration #3

AND

		CPE23	From	Up To
OR
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1

Configuration #4

AND

		CPE23
OR
	Netapp Active Iq Unified Manager for Vmware Vsphere	cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere
OR
	Running on/with
	Netapp Cloud Backup	cpe:2.3:a:netapp:cloud_backup:-
OR
	Running on/with
	Netapp Data Availability Services	cpe:2.3:a:netapp:data_availability_services:-
OR
	Running on/with
	Netapp Hci Management Node	cpe:2.3:a:netapp:hci_management_node:-
OR
	Running on/with
	Netapp Solidfire	cpe:2.3:a:netapp:solidfire:-
OR
	Running on/with
	Netapp Steelstore Cloud Integrated Storage	cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-

Configuration #5

AND

		CPE23
OR
	Netapp H410c Firmware	cpe:2.3:o:netapp:h410c_firmware:-
OR
	Running on/with
	Netapp H410c	cpe:2.3:h:netapp:h410c:-