← Back

CVE-2020-15852

nvd nist
Published: Jul 20, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of synchronization between the I/O bitmaps of TSS and Xen, aka CID-cadfad870154.

Affected (5)

Linux
1 product
Linux Kernel
Xen
1 product
Xen
Netapp
3 products
Cloud Backup
Solidfire Baseboard Management Controller
Steelstore Cloud Integrated Storage
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
From 5.5 to 5.7.9
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Xen
Up to 4.13.1
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Solidfire Baseboard Management Controller
All versions
Steelstore Cloud Integrated Storage
All versions

Related CWEs

CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

References (10)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.