Every CVE Search/ Get API key

CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition...

7.0 HighFix available

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.46%Down 1.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.0

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
CVE-2020-29369
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
CVE-2020-29369
Updated
2026-11-02
EUVDEUVD-2020-21742 No score

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
EUVD-2020-21742
Updated
2026-11-03
GitHub AdvisoriesGHSA-rp7p-r22g-55vr 7.0

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition...

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
GHSA-rp7p-r22g-55vr
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02
OSV 7.0

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
CVE-2020-29369
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-29369 7.0

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
DEBIAN-CVE-2020-29369
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVUBUNTU-CVE-2020-29369 7.0

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

Record
UBUNTU-CVE-2020-29369
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2020:2161-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-29369: There was a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 bnc#1179432).
  • CVE-2020-29371: An issue was discovered in romfs_dev_read in fs/romfs/storage.c, where uninitialized memory could leak to userspace, aka CID-bcf85fcedfdd (bnc#1179429).
  • CVE-2020-15436: Use-after-free vulnerability in fs/block_dev.c allowed local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field (bnc#1179141).
  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well. Kernel versions may be vulnerable to this issue (bnc#1175721 bnc#1178782).
  • CVE-2020-15437: The Linux kernel was vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allowed local users to cause a denial of service by using the p->serial_in pointer which uninitialized (bnc#1179140).
  • CVE-2020-27777: Restricted RTAS requests from userspace (bsc#1179107).
  • CVE-2020-28974: A slab-out-of-bounds read in fbcon could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height (bnc#1178589).
  • CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#1177666).
  • CVE-2020-28941: Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once (bnc#1178740).
  • CVE-2020-28915: A buffer over-read (at the framebuffer layer) in the fbcon code could be used by local attackers to read kernel memory, aka CID-6735b4632def (bnc#1178886).
  • CVE-2020-25669: Avoid a use-after-free in teardown paths in sunkbd (bsc#1178182).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • ACPI: GED: fix -Wformat (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • Convert trailing spaces and periods in path components (bsc#1179424).
  • Documentation/admin-guide/module-signing.rst: add openssl command option example for CodeSign EKU (bsc#1177353, bsc#1179076).
  • Drop sysctl files for…
Record
openSUSE-SU-2020:2161-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to 3.12.31 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
  • CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
  • CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107)
  • CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
  • CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
  • CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
  • CVE-2020-25705: Fixed an issue which could have allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization (bsc#1175721).
  • CVE-2020-28941: Fixed an issue where local attackers on systems with the speakup driver could cause a local denial of service attack (bsc#1178740).
  • CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
  • CVE-2020-29369: Fixed a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 1179432).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: GED: fix -Wformat (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: fix kernel-doc markups (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
  • ALSA: hda/realtek - Fixed HP headset Mic can't be detected (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
  • ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
  • arm64: bpf: Fix branch offset in JIT (git-fixes).
  • arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY (git-fixes).
  • arm64: dts: allwinner: a64: OrangePi Win: Fix ethernet node (git-fixes).
  • arm64:…
Record
openSUSE-SU-2020:2260-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0242-1 No score

Security update for RT kernel

This update syncs the RT kernel from the SUSE Linux Enterprise 15-SP2 codestream.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0242-1
Updated
2026-11-02
OSVSUSE-SU-2020:3713-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
  • CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
  • CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107)
  • CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
  • CVE-2020-28941: Fixed an issue where local attackers on systems with the speakup driver could cause a local denial of service attack (bsc#1178740).
  • CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
  • CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
  • CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
  • CVE-2020-8694, CVE-2020-8695: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415 bsc#1170446)
  • CVE-2020-28368: Fixed Intel RAPL sidechannel attack aka PLATYPUS attack (XSA-351 bsc#1178591).
  • CVE-2020-29369: Fixed a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 bsc#1179432).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: GED: fix -Wformat (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: fix kernel-doc markups (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
  • ALSA: hda/realtek - Fixed HP headset Mic can't be detected (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
  • ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
  • arm64: bpf: Fix branch offset in JIT (git-fixes).
  • arm64: dts:…
Record
SUSE-SU-2020:3713-1
Updated
2026-11-02
OSVSUSE-SU-2020:3748-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to 3.12.31 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
  • CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
  • CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107)
  • CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
  • CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
  • CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
  • CVE-2020-25705: Fixed an issue which could have allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization (bsc#1175721).
  • CVE-2020-28941: Fixed an issue where local attackers on systems with the speakup driver could cause a local denial of service attack (bsc#1178740).
  • CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
  • CVE-2020-29369: Fixed a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 1179432).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: GED: fix -Wformat (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: fix kernel-doc markups (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
  • ALSA: hda/realtek - Fixed HP headset Mic can't be detected (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
  • ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
  • ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
  • arm64: bpf: Fix branch offset in JIT (git-fixes).
  • arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY (git-fixes).
  • arm64: dts: allwinner: a64: OrangePi Win: Fix ethernet node (git-fixes).
  • arm64:…
Record
SUSE-SU-2020:3748-1
Updated
2026-11-02
OSVSUSE-SU-2020:3764-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
  • CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25705: Fixed A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107)
  • CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).
  • CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
  • CVE-2020-28941: Fixed an issue where local attackers on systems with the speakup driver could cause a local denial of service attack (bsc#1178740).
  • CVE-2020-29369: Fixed a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe (bnc#1173504 bsc#1179432).
  • CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
  • CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).

The following non-security bugs were fixed:

  • ACPI: APEI: Kick the memory_failure() queue for synchronous errors (jsc#SLE-16610).
  • ACPI: button: Add DMI quirk for Medion Akoya E2228T (git-fixes).
  • ACPICA: Add NHLT table signature (bsc#1176200).
  • Add bug reference to two hv_netvsc patches (bsc#1178853).
  • ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
  • ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
  • ALSA: hda: fix jack detection with Realtek codecs when in D3 (git-fixes).
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
  • ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
  • ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
  • ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (git-fixes).
  • ALSA: hda/realtek - Add supported mute Led for HP (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (git-fixes).
  • ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (git-fixes).
  • ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (git-fixes).
  • ALSA: hda/realtek - HP Headset Mic can't detect after boot (git-fixes).
  • ALSA: hda: Reinstate runtime_allow() for all hda controllers (git-fixes).
  • ALSA: mixart: Fix mutex deadlock (git-fixes).
  • ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
  • ALSA: usb-audio: Convert to the common vmalloc memalloc (bsc#1178203).
  • ALSA: usb-audio: Correct wrongly matching entries with audio class (bsc#1178203).
  • ALSA: usb-audio: Move device rename and profile quirks to an internal table (bsc#1178203).
  • ALSA: usb-audio: Properly match with audio interface class (bsc#1178203).
  • ALSA: usb-audio: Simplify quirk entries with a macro (bsc#1178203).
  • ALSA: usb-audio: Support PCM sync_stop (bsc#1178203).
  • ALSA: usb-audio: US16x08: fix value…
Record
SUSE-SU-2020:3764-1
Updated
2026-11-02
OSVSUSE-SU-2020:3843-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-22 fixes one issue.

The following security issue was fixed:

  • CVE-2020-29369: Fixed a race condition between certain expand functions and page-table free operations from an munmap call, aka CID-246c320a8cfe (bsc#1179646).
Record
SUSE-SU-2020:3843-1
Updated
2026-11-02
OSVUSN-4752-1 No score

linux-oem-5.6 vulnerabilities

Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered that legacy pairing and secure-connections pairing authentication in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. A physically proximate attacker could use this to impersonate a previously paired Bluetooth device. (CVE-2020-10135)

Jay Shin discovered that the ext4 file system implementation in the Linux kernel did not properly handle directory access with broken indexing, leading to an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-14314)

It was discovered that the block layer implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-15436)

It was discovered that the serial port driver in the Linux kernel did not properly initialize a pointer in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2020-15437)

Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490)

It was discovered that the NFS client implementation in the Linux kernel did not properly perform bounds checking before copying security labels in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-25212)

It was discovered that the Rados block device (rbd) driver in the Linux kernel did not properly perform privilege checks for access to rbd devices in some situations. A local attacker could use this to map or unmap rbd block devices. (CVE-2020-25284)

It was discovered that the block layer subsystem in the Linux kernel did not properly handle zero-length requests. A local attacker could use this to cause a denial of service. (CVE-2020-25641)

It was discovered that the HDLC PPP implementation in the Linux kernel did not properly validate input in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-25643)

Kiyin (尹亮) discovered that the perf subsystem in the Linux kernel did not properly deallocate memory in some situations. A privileged attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2020-25704)

It was discovered that the KVM hypervisor in the Linux kernel did not properly handle interrupts in certain situations. A local attacker in a guest VM could possibly use this to cause a denial of service (host system crash). (CVE-2020-27152)

It was discovered that the jfs file system implementation in the Linux kernel contained an out-of-bounds read vulnerability. A local attacker could use this to possibly cause a denial of service (system crash). (CVE-2020-27815)

It was discovered that an information leak existed in the syscall implementation in the Linux kernel on 32 bit systems. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2020-28588)

It was discovered that the framebuffer implementation in the Linux kernel did not properly perform range checks in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2020-28915)

Jann Horn discovered a race condition in the copy-on-write implementation in the Linux kernel when handling hugepages. A local attacker could use this to gain unintended write access to read-only memory pages. (CVE-2020-29368)

Jann Horn discovered that the mmap implementation in the Linux kernel contained a race…

Record
USN-4752-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 5.7.17-1
5.7.17-1
linux
Debian:13
 before 5.7.17-1
5.7.17-1
linux
Debian:14
 before 5.7.17-1
5.7.17-1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-18.29.1
5.3.18-18.29.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2.9.17.3
5.3.18-24.43.2.9.17.3
kernel-preempt
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
Show 69 moreShow less
Affected packages
PackageAffectedFixed
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-preempt
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-livepatch-SLE15-SP2_Update_8
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 12 CVEs
 before 1-5.3.3
1-5.3.3
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-24.43.2
5.3.18-24.43.2
kernel-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-19.1
5.3.18-19.1
kernel-rt_debug
SUSE:Real Time Module 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-19.1
5.3.18-19.1
kernel-source-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-19.1
5.3.18-19.1
kernel-syms-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 11 CVEs
 before 5.3.18-19.1
5.3.18-19.1
kernel-livepatch-SLE15-SP2_Update_0
SUSE:Linux Enterprise Live Patching 15 SP2
 before 6-5.2
6-5.2
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1022.22~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.2
5.4.0-1022.22~18.04.1
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1023.23~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.1
5.4.0-1023.23~18.04.1
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1022.22~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.1
5.4.0-1022.22~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-45.49~18.04.2, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.1
5.4.0-45.49~18.04.2
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1022.22~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.1
5.4.0-1022.22~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1016.17~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.1
5.4.0-1016.17~18.04.1
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-45.49, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 11 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.46
5.4.0-45.49
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1022.22, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 9 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.21
5.4.0-1022.22
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1023.23, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 7 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.22
5.4.0-1023.23
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1022.22, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 7 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.21
5.4.0-1022.22
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1021.21, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 7 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.20
5.4.0-1021.21
linux-oem-5.6
Ubuntu:20.04:LTS
 before 5.6.0-1048.52, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 17 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.51
5.6.0-1048.52
linux-oracle
Ubuntu:20.04:LTS
 before 5.4.0-1022.22, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 7 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.21
5.4.0-1022.22
linux-raspi
Ubuntu:20.04:LTS
 before 5.4.0-1016.17, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.135.4.0-1015.15
5.4.0-1016.17
linux-riscv
Ubuntu:20.04:LTS
 before 5.4.0-31.35, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
5.4.0-31.35
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1069.73+fips2, plus listed versions
5.4.0-1021.21+fips2
5.4.0-1069.73+fips2
linux-azure-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1073.76+fips1, plus listed versions
5.4.0-1022.22+fips1
5.4.0-1073.76+fips1
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1067.71~20.04.1, plus listed versions
5.4.0-1021.21+fips1
5.4.0-1067.71~20.04.1
linux-aws-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips2
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1022.22+fips1
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 5.6.0-1048.52, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 17 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.51
5.6.0-1048.52
kernel-debug
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-default
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-default-base
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1.lp152.8.12.1
5.3.18-lp152.54.1.lp152.8.12.1
kernel-docs
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.2
5.3.18-lp152.54.2
kernel-kvmsmall
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-obs-build
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-obs-qa
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-preempt
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-source
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-syms
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 5.3.18-lp152.54.1
5.3.18-lp152.54.1
kernel-default-base
openSUSE:Leap 15.2
From an advisory covering 12 CVEs
 before 5.3.18-lp152.57.1.lp152.8.17.1
5.3.18-lp152.57.1.lp152.8.17.1
kernel-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-rt_debug
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-source-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-syms-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-29369 is a high vulnerability (CVSS 7.0) in Linux Kernel, published November 28, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 39th percentile. Fixed in linux 5.7.17-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 684 references and the rest of 6 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open