WID-SEC-W-2022-2095
Vulnerability from csaf_certbund - Published: 2020-05-19 22:00 - Updated: 2025-12-09 23:00Summary
Linux Kernel: Schwachstelle ermöglicht Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Angriff
Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Appliance
- CISCO Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Appliance\n- CISCO Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-2095 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2022-2095.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-2095 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2095"
},
{
"category": "external",
"summary": "Mailing list OSS-Security vom 2020-05-19",
"url": "http://seclists.org/oss-sec/2020/q2/129"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2020-0C0B5D9004 vom 2020-05-22",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-0c0b5d9004"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2020-320F05784E vom 2020-05-22",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-320f05784e"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2665 vom 2020-06-23",
"url": "https://access.redhat.com/errata/RHSA-2020:2665"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2664 vom 2020-06-23",
"url": "https://access.redhat.com/errata/RHSA-2020:2664"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2832 vom 2020-07-07",
"url": "https://access.redhat.com/errata/RHSA-2020:2832"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2831 vom 2020-07-07",
"url": "https://access.redhat.com/errata/RHSA-2020:2831"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2851 vom 2020-07-07",
"url": "https://access.redhat.com/errata/RHSA-2020:2851"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2854 vom 2020-07-07",
"url": "https://access.redhat.com/errata/RHSA-2020:2854"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2020-089 vom 2020-07-16",
"url": "https://downloads.avaya.com/css/P8/documents/101069427"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3010 vom 2020-07-21",
"url": "https://access.redhat.com/errata/RHSA-2020:3010"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3041 vom 2020-07-21",
"url": "https://access.redhat.com/errata/RHSA-2020:3041"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3019 vom 2020-07-21",
"url": "https://access.redhat.com/errata/RHSA-2020:3019"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2027-1 vom 2020-07-23",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3194 vom 2020-07-28",
"url": "https://access.redhat.com/errata/RHSA-2020:3194"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3222 vom 2020-07-29",
"url": "https://access.redhat.com/errata/RHSA-2020:3222"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3230 vom 2020-07-30",
"url": "https://access.redhat.com/errata/RHSA-2020:3230"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2105-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2105-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007215.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2107-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007216.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2103-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2106-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007214.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2106-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2107-1 vom 2020-08-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2122-1 vom 2020-08-05",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007225.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2119-1 vom 2020-08-04",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2122-1 vom 2020-08-05",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2121-1 vom 2020-08-04",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007220.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2121-1 vom 2020-08-04",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2156-1 vom 2020-08-07",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2020-0032 vom 2020-08-08",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2020-August/000992.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2478-1 vom 2020-09-03",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2487-1 vom 2020-09-04",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4525-1 vom 2020-09-22",
"url": "https://usn.ubuntu.com/4525-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4526-1 vom 2020-09-22",
"url": "https://usn.ubuntu.com/4526-1/"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2385 vom 2020-09-28",
"url": "https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202009/msg00025.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2420 vom 2020-10-30",
"url": "https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202010/msg00032.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2420 vom 2020-10-31",
"url": "https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202010/msg00034.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9141 vom 2021-04-01",
"url": "http://linux.oracle.com/errata/ELSA-2021-9141.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9140 vom 2021-04-01",
"url": "http://linux.oracle.com/errata/ELSA-2021-9140.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.4-2022-016 vom 2022-01-31",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-016.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5361-1 vom 2022-04-01",
"url": "https://ubuntu.com/security/notices/USN-5361-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-9999 vom 2022-11-16",
"url": "http://linux.oracle.com/errata/ELSA-2022-9999.html"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20200608-0001 vom 2025-12-10",
"url": "https://security.netapp.com/advisory/NTAP-20200608-0001"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Schwachstelle erm\u00f6glicht Denial of Service",
"tracking": {
"current_release_date": "2025-12-09T23:00:00.000+00:00",
"generator": {
"date": "2025-12-10T07:50:55.338+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2022-2095",
"initial_release_date": "2020-05-19T22:00:00.000+00:00",
"revision_history": [
{
"date": "2020-05-19T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2020-05-21T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2020-06-01T22:00:00.000+00:00",
"number": "3",
"summary": "Referenz(en) aufgenommen: FEDORA-2020-5436586091"
},
{
"date": "2020-06-23T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-06T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-07T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-15T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2020-07-20T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-21T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-23T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-07-28T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-07-29T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-08-03T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-08-04T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-08-06T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-08-09T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von ORACLE aufgenommen"
},
{
"date": "2020-09-03T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-09-06T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-09-21T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-09-28T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2020-11-01T23:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2021-03-31T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2022-01-30T23:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-03-31T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-11-16T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-12-09T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von NetApp aufgenommen"
}
],
"status": "final",
"version": "26"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Avaya Aura Application Enablement Services",
"product": {
"name": "Avaya Aura Application Enablement Services",
"product_id": "T015516",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Communication Manager",
"product": {
"name": "Avaya Aura Communication Manager",
"product_id": "T015126",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:communication_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Device Services",
"product": {
"name": "Avaya Aura Device Services",
"product_id": "T015517",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_device_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Utility Services",
"product": {
"name": "Avaya Aura Utility Services",
"product_id": "T015824",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_utility_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Breeze Platform",
"product": {
"name": "Avaya Breeze Platform",
"product_id": "T015823",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:breeze_platform:-"
}
}
},
{
"category": "product_name",
"name": "Avaya CMS",
"product": {
"name": "Avaya CMS",
"product_id": "997",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:call_management_system_server:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Session Border Controller",
"product": {
"name": "Avaya Session Border Controller",
"product_id": "T015520",
"product_identification_helper": {
"cpe": "cpe:/h:avaya:session_border_controller:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp ActiveIQ Unified Manager",
"product": {
"name": "NetApp ActiveIQ Unified Manager",
"product_id": "T025152",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.6.13",
"product": {
"name": "Open Source Linux Kernel \u003c=5.6.13",
"product_id": "T016559"
}
},
{
"category": "product_version_range",
"name": "\u003c=5.6.13",
"product": {
"name": "Open Source Linux Kernel \u003c=5.6.13",
"product_id": "T016559-fixed"
}
}
],
"category": "product_name",
"name": "Linux Kernel"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat Fedora",
"product": {
"name": "Red Hat Fedora",
"product_id": "T007849",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-12888",
"product_status": {
"known_affected": [
"T025152",
"T015518",
"T015517",
"67646",
"T015516",
"T015824",
"T015823",
"T007849",
"T015127",
"T015126",
"T004914",
"T015520",
"2951",
"T002207",
"T000126",
"997",
"398363"
],
"last_affected": [
"T016559"
]
},
"release_date": "2020-05-19T22:00:00.000+00:00",
"title": "CVE-2020-12888"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…