PT-2020-2430
CVE-2020-12771
·
Published
2020-05-08
·
Updated
2022-04-26
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.6.11
Description
An issue in the Linux kernel exists due to insufficient input validation in the
btree gc coalesce function, located in drivers/md/bcache/btree.c. This can lead to a deadlock if a coalescing operation fails, potentially allowing an attacker to cause a denial of service.Recommendations
For Linux kernel versions prior to 5.6.11, consider applying configuration changes to minimize the risk of exploitation, such as restricting access to the
btree gc coalesce function in drivers/md/bcache/btree.c until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾