CVE-2020-10751

Published: May 26, 2020Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Exploitability: 1.8 / Impact: 4.2

Source: NVD

Description

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.

Affected (3)

Products: Kernel: Selinux · Redhat: Enterprise Linux Server

1 product

1 product

Enterprise Linux Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kernel Selinux	Before 5.7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server	Version 8.0

Related CWEs

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Acceptance of Extraneous Untrusted Data With Trusted Data

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2020/05/27/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10751

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6

Source: secalert@redhat.com

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html

Source: secalert@redhat.com

https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html

Source: secalert@redhat.com

https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html

Source: secalert@redhat.com

https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuAPysZD=5hmyO4QisgxCKi4DHU3CfMPSP=yg%40mail.gmail.com/

Source: secalert@redhat.com

https://usn.ubuntu.com/4389-1/

Source: secalert@redhat.com

https://usn.ubuntu.com/4390-1/

Source: secalert@redhat.com

https://usn.ubuntu.com/4391-1/

Source: secalert@redhat.com

https://usn.ubuntu.com/4412-1/

Source: secalert@redhat.com

https://usn.ubuntu.com/4413-1/

Source: secalert@redhat.com

https://www.debian.org/security/2020/dsa-4698

Source: secalert@redhat.com

https://www.debian.org/security/2020/dsa-4699

Source: secalert@redhat.com

https://www.openwall.com/lists/oss-security/2020/04/30/5

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2020/05/27/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10751

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuAPysZD=5hmyO4QisgxCKi4DHU3CfMPSP=yg%40mail.gmail.com/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4389-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4390-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4391-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4412-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4413-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2020/dsa-4698

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2020/dsa-4699

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.openwall.com/lists/oss-security/2020/04/30/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.