CVE-2020-29370

HIGH

Linux kernel <5.5.11 - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71.

Exploits (1)

nomisec STUB
by nanopathi · poc
https://github.com/nanopathi/linux-4.19.72_CVE-2020-29370

References (4)

Core 4
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugs.chromium.org/p/project-zero/issues/detail?id=2022
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20201218-0001/

Scores

CVSS v3 7.0
EPSS 0.0036
EPSS Percentile 58.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-362
Status published
Products (7)
linux/linux_kernel < 5.5.11
netapp/cloud_backup
netapp/h410c_firmware
netapp/hci_compute_node_firmware
netapp/solidfire\,_enterprise_sds_\&_hci_storage_node
netapp/solidfire_\&_hci_management_node
netapp/solidfire_baseboard_management_controller_firmware
Published Nov 28, 2020
Tracked Since Feb 18, 2026