CVE-2020-9391
MEDIUMLinux Kernel 5.4-5.5.6 - Out-of-bounds Write via brk System Call
Title source: llmDescription
An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.
References (5)
Core 5
Core References
Mailing List, Patch, Vendor Advisory x_refsource_misc
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663a
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1797052
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/02/25/6
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4LH35HOPBJIKYHYFXMBBM75DN75PZHZ/
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200313-0003/
Scores
CVSS v3
5.5
EPSS
0.0016
EPSS Percentile
36.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (10)
fedoraproject/fedora
31
linux/linux_kernel
5.4
linux/linux_kernel
5.5 - 5.5.6
netapp/active_iq_unified_manager
netapp/cloud_backup
netapp/data_availability_services
netapp/h410c_firmware
netapp/hci_management_node
netapp/solidfire
netapp/steelstore_cloud_integrated_storage
Published
Feb 25, 2020
Tracked Since
Feb 18, 2026