CVE-2020-11884

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.19 through 5.6.7

Description The issue is related to a race condition in the Linux kernel, specifically in the enable sacf uaccess function, which can lead to code execution. This occurs because the function fails to protect against a concurrent page table upgrade. A crash could also occur as a result of this issue. The problem is associated with errors in executing multithreaded tasks.

Recommendations For Linux kernel versions 4.19 through 5.6.7, consider disabling the enable sacf uaccess function as a temporary workaround until a patch is available. Restrict access to the arch/s390/lib/uaccess.c module to minimize the risk of exploitation. Avoid using the enable sacf uaccess function in multithreaded tasks until the issue is resolved.