CVE-2020-15852

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.5 through 5.7.9

Description The issue is related to the tss invalidate io bitmap function in the Linux kernel, which is associated with incorrect default permission settings. An attacker may exploit this to gain elevated privileges, potentially allowing them to obtain the I/O port permissions of an unrelated task. This occurs due to mishandling of tss invalidate io bitmap, causing a loss of synchronization between the I/O bitmaps of TSS and Xen.

Recommendations For Linux kernel versions 5.5 through 5.7.9, consider updating to a version that includes a fix for the tss invalidate io bitmap function mishandling issue. As a temporary workaround, restrict access to the tss invalidate io bitmap function to minimize the risk of exploitation.