CVE-2020-11884

Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation

Published Apr 29, 2020 CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Description
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-4667-1 linux security update
EUVD EUVD EUVD-2020-4223 In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.
Ubuntu USN Ubuntu USN USN-4342-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4343-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-4345-1 Linux kernel vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00039}

epss

{'score': 0.0007}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 4, 2024, 11:42 AM
Reserved
Apr 17, 2020, 12:00 AM
Status
Modified
Published
Apr 29, 2020, 1:15 PM
Modified
Jun 17, 2026, 2:50 AM
Severity
Important
Public date
Apr 28, 2020, 6:00 PM