CVE-2020-27777

Published: Dec 15, 2020Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.

Affected (11)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Openshift Container Platform

1 product

2 products

Openshift Container Platform

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.14.204
Linux Linux Kernel	From 4.15 to 4.19.155
Linux Linux Kernel	From 4.20 to 5.4.75
Linux Linux Kernel	From 5.5 to 5.9.5

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Openshift Container Platform	Version 4.4
Redhat Openshift Container Platform	Version 4.5
Redhat Openshift Container Platform	Version 4.6