Every CVE Search/ Get API key

CVE-2020-29373

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the...

6.5 MediumFix available

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.52%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
CVE-2020-29373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
CVE-2020-29373
Updated
2026-11-02
EUVDEUVD-2020-21746 No score

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
EUVD-2020-21746
Updated
2026-11-03
GitHub AdvisoriesGHSA-gv63-32vm-56hx No score

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the...

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
GHSA-gv63-32vm-56hx
Weakness
CWE-22
Updated
2026-11-02
OSV 6.5

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
CVE-2020-29373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-29373 6.5

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
DEBIAN-CVE-2020-29373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
Show 10 moreShow less
OSVUBUNTU-CVE-2020-29373 6.5

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.

Record
UBUNTU-CVE-2020-29373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2021:0060-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-27835: A use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
  • CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
  • CVE-2020-28374: In drivers/target/target_core_xcopy.c insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore (bnc#1178372).
  • CVE-2020-36158: mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c might have allowed remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332 (bnc#1180559).
  • CVE-2020-27825: A use-after-free flaw was found in kernel/trace/ring_buffer.c. There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat (bnc#1179960).
  • CVE-2020-0466: In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180031).
  • CVE-2020-27068: In the nl80211_policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation (bnc#1180086).
  • CVE-2020-0444: In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180027).
  • CVE-2020-0465: In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180029).
  • CVE-2020-29661: A locking issue was discovered in the tty subsystem of the Linux kernel drivers/tty/tty_jobctrl.c allowed a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b (bnc#1179745).
  • CVE-2020-29660: A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may have allowed a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24 (bnc#1179745).
  • CVE-2020-27777: A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel (bnc#1179107).
  • CVE-2020-29373: An issue was discovered in fs/io_uring.c in the Linux kernel It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d (bnc#1179434).
  • CVE-2020-11668: drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandled invalid descriptors, aka CID-a246b4d54770 (bnc#1168952).
  • CVE-2020-27830: Fixed a NULL-ptr deref bug in spk_ttyio_receive_buf2 (bnc#1179656).
  • CVE-2020-29370: An issue was discovered in…
Record
openSUSE-SU-2021:0060-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0242-1 No score

Security update for RT kernel

This update syncs the RT kernel from the SUSE Linux Enterprise 15-SP2 codestream.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0242-1
Updated
2026-11-02
OSVSUSE-SU-2021:0096-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
  • CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
  • CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
  • CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver (bnc#1168952).
  • CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
  • CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation (bnc#1179601).
  • CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
  • CVE-2020-27830: Fixed a null pointer dereference in speakup (bsc#1179656).
  • CVE-2020-29370: Fixed a race condition in kmem_cache_alloc_bulk (bnc#1179435).
  • CVE-2020-29373: Fixed an unsafe handling of the root directory during path lookups in fs/io_uring.c (bnc#1179434).
  • CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
  • CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).

The following non-security bugs were fixed:

  • ACPI: APEI: Kick the memory_failure() queue for synchronous errors (jsc#SLE-16610).
  • ACPI: PNP: compare the string length in the matching_id() (git-fixes).
  • ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (git-fixes).
  • ALSA: core: memalloc: add page alignment for iram (git-fixes).
  • ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
  • ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
  • ALSA: hda/hdmi: always print pin NIDs as hexadecimal (git-fixes).
  • ALSA: hda/hdmi: packet buffer index must be set before reading value (git-fixes).
  • ALSA: hda/proc - print DP-MST connections (git-fixes).
  • ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
  • ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (git-fixes).
  • ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
  • ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
  • ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (git-fixes).
  • ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (git-fixes).
  • ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (git-fixes).
  • ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
  • ALSA: rawmidi: Access runtime->avail always in spinlock (git-fixes).
  • ALSA: seq: remove useless function (git-fixes).
  • ALSA: usb-audio: Add generic implicit fb parsing (bsc#1178203).
  • ALSA: usb-audio: Add hw constraint for implicit fb sync (bsc#1178203).
  • ALSA: usb-audio: Add implicit fb support for Steinberg UR22 (git-fixes).
  • ALSA: usb-audio: Add implicit_fb module option (bsc#1178203).
  • ALSA: usb-audio: Add quirk for Pioneer DJ DDJ-SR2 (git-fixes).
  • ALSA: usb-audio: Add snd_usb_get_endpoint() helper (bsc#1178203).
  • ALSA: usb-audio: Add snd_usb_get_host_interface() helper (bsc#1178203).
  • ALSA: usb-audio: Add support for Pioneer DJ DDJ-RR controller (git-fixes).
  • ALSA: usb-audio:…
Record
SUSE-SU-2021:0096-1
Updated
2026-11-02
OSVSUSE-SU-2021:0108-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
  • CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
  • CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
  • CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
  • CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
  • CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
  • CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
  • CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
  • CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
  • CVE-2020-29373: Fixed an unsafe handling of the root directory during path lookups in fs/io_uring.c (bnc#1179434).
  • CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver (bnc#1168952).
  • CVE-2020-27830: Fixed a null pointer dereference in speakup (bsc#1179656).
  • CVE-2020-29370: Fixed a race condition in kmem_cache_alloc_bulk (bnc#1179435).

The following non-security bugs were fixed:

  • ACPI: PNP: compare the string length in the matching_id() (git-fixes).
  • add reference to CVE and its bsc
  • ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (git-fixes).
  • ALSA: core: memalloc: add page alignment for iram (git-fixes).
  • ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
  • ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
  • ALSA: hda/hdmi: always print pin NIDs as hexadecimal (git-fixes).
  • ALSA: hda/hdmi: packet buffer index must be set before reading value (git-fixes).
  • ALSA: hda/proc - print DP-MST connections (git-fixes).
  • ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (git-fixes).
  • ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
  • ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
  • ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (git-fixes).
  • ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
  • ALSA: rawmidi: Access runtime->avail always in spinlock (git-fixes).
  • ALSA: seq: remove useless function (git-fixes).
  • ALSA: usb-audio: Add generic implicit fb parsing (bsc#1178203).
  • ALSA: usb-audio: Add hw constraint for implicit fb sync (bsc#1178203).
  • ALSA: usb-audio: Add implicit fb support for Steinberg UR22 (git-fixes).
  • ALSA: usb-audio: Add implicit_fb module option (bsc#1178203).
  • ALSA: usb-audio: Add quirk for Pioneer DJ DDJ-SR2 (git-fixes).
  • ALSA: usb-audio: Add snd_usb_get_endpoint() helper (bsc#1178203).
  • ALSA: usb-audio: Add snd_usb_get_host_interface() helper (bsc#1178203).
  • ALSA: usb-audio: Add support for Pioneer DJ DDJ-RR controller (git-fixes).
  • ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (git-fixes).
  • ALSA: usb-audio: Always set up the parameters after resume (bsc#1178203).
  • ALSA: usb-audio: Avoid doubly initialization for implicit fb (bsc#1178203).
  • ALSA: usb-audio: Check implicit feedback EP generically for UAC2 (bsc#1178203).
  • ALSA: usb-audio: Check…
Record
SUSE-SU-2021:0108-1
Updated
2026-11-02
OSVSUSE-SU-2021:0117-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
  • CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
  • CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
  • CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
  • CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
  • CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
  • CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
  • CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
  • CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
  • CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
  • CVE-2020-29373: Fixed an unsafe handling of the root directory during path lookups in fs/io_uring.c (bnc#1179434).
  • CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver (bnc#1168952).
  • CVE-2020-27830: Fixed a null pointer dereference in speakup (bsc#1179656).
  • CVE-2020-29370: Fixed a race condition in kmem_cache_alloc_bulk (bnc#1179435).
  • CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

  • ACPI: APEI: Kick the memory_failure() queue for synchronous errors (jsc#SLE-16610).
  • ACPI: PNP: compare the string length in the matching_id() (git-fixes).
  • ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (git-fixes).
  • ALSA: core: memalloc: add page alignment for iram (git-fixes).
  • ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
  • ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
  • ALSA: hda/hdmi: always print pin NIDs as hexadecimal (git-fixes).
  • ALSA: hda/hdmi: packet buffer index must be set before reading value (git-fixes).
  • ALSA: hda/proc - print DP-MST connections (git-fixes).
  • ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
  • ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
  • ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (git-fixes).
  • ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (git-fixes).
  • ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
  • ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
  • ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
  • ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (git-fixes).
  • ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (git-fixes).
  • ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (git-fixes).
  • ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
  • ALSA: rawmidi: Access runtime->avail always in spinlock (git-fixes).
  • ALSA: seq: remove useless function (git-fixes).
  • ALSA: usb-audio: Add generic implicit fb parsing (bsc#1178203).
  • ALSA: usb-audio: Add hw constraint for implicit fb sync (bsc#1178203).
  • ALSA: usb-audio: Add implicit fb support for Steinberg UR22 (git-fixes).
  • ALSA:…
Record
SUSE-SU-2021:0117-1
Updated
2026-11-02
OSVSUSE-SU-2021:0359-1 No score

Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-24_46 fixes several issues.

The following security issues were fixed:

  • CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779).
  • CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
  • CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
Record
SUSE-SU-2021:0359-1
Updated
2026-11-02
OSVSUSE-SU-2021:0362-1 No score

Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-24_24 fixes several issues.

The following security issues were fixed:

  • CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779).
  • CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
  • CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032.
  • CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
  • CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
  • CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
  • CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
Record
SUSE-SU-2021:0362-1
Updated
2026-11-02
OSVSUSE-SU-2021:0367-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-22 fixes several issues.

The following security issues were fixed:

  • CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779).
  • CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
  • CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
  • CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032.
  • CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
  • CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
  • CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
  • CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
Record
SUSE-SU-2021:0367-1
Updated
2026-11-02
OSVSUSE-SU-2021:0869-1 No score

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-24_49 fixes several issues.

The following security issues were fixed:

  • CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
  • CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace could escape to unintended filesystem locations (bsc#1179779).
Record
SUSE-SU-2021:0869-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 5.6.7-1
5.6.7-1
linux
Debian:13
 before 5.6.7-1
5.6.7-1
linux
Debian:14
 before 5.6.7-1
5.6.7-1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-18.32.1
5.3.18-18.32.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-18.32.1
5.3.18-18.32.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 12 CVEs
 before 5.3.18-18.32.1
5.3.18-18.32.1
kernel-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 13 CVEs
 before 5.3.18-22.1
5.3.18-22.1
kernel-rt_debug
SUSE:Real Time Module 15 SP2
From an advisory covering 13 CVEs
 before 5.3.18-22.1
5.3.18-22.1
kernel-source-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 13 CVEs
 before 5.3.18-22.1
5.3.18-22.1
kernel-syms-rt
SUSE:Real Time Module 15 SP2
From an advisory covering 13 CVEs
 before 5.3.18-22.1
5.3.18-22.1
Show 64 moreShow less
Affected packages
PackageAffectedFixed
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1.9.19.1
5.3.18-24.46.1.9.19.1
kernel-preempt
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-preempt
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-livepatch-SLE15-SP2_Update_9
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 15 CVEs
 before 1-5.3.1
1-5.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 15 CVEs
 before 5.3.18-24.46.1
5.3.18-24.46.1
kernel-livepatch-SLE15-SP2_Update_9
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 3 CVEs
 before 2-2.1
2-2.1
kernel-livepatch-SLE15-SP2_Update_8
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 7 CVEs
 before 2-2.1
2-2.1
kernel-livepatch-SLE15-SP2_Update_7
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 7 CVEs
 before 3-2.1
3-2.1
kernel-livepatch-SLE15-SP2_Update_6
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 7 CVEs
 before 3-2.1
3-2.1
kernel-livepatch-SLE15-SP2_Update_5
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 7 CVEs
 before 3-2.1
3-2.1
kernel-livepatch-SLE15-SP2_Update_4
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 7 CVEs
 before 5-2.1
5-2.1
kernel-livepatch-SLE15-SP2_Update_3
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 8 CVEs
 before 5-2.1
5-2.1
kernel-livepatch-SLE15-SP2_Update_2
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 8 CVEs
 before 5-2.1
5-2.1
kernel-livepatch-SLE15-SP2_Update_1
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 8 CVEs
 before 6-2.1
6-2.1
kernel-livepatch-SLE15-SP2_Update_0
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 8 CVEs
 before 7-5.2
7-5.2
kernel-livepatch-SLE15-SP2_Update_10
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 2 CVEs
 before 2-2.2
2-2.2
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-gke-5.3
Ubuntu:18.04:LTS
 before 5.3.0-1018.19~18.04.1, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.15.3.0-1016.17~18.04.15.3.0-1017.18~18.04.1
5.3.0-1018.19~18.04.1
linux-raspi2-5.3
Ubuntu:18.04:LTS
 before 5.3.0-1023.25~18.04.1, plus listed versions
5.3.0-1017.19~18.04.15.3.0-1018.20~18.04.15.3.0-1019.21~18.04.15.3.0-1021.23~18.04.15.3.0-1022.24~18.04.1
5.3.0-1023.25~18.04.1
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
kernel-debug
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-default
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-docs
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-kvmsmall
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-obs-build
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-obs-qa
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-preempt
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-source
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-syms
openSUSE:Leap 15.2
From an advisory covering 17 CVEs
 before 5.3.18-lp152.60.1
5.3.18-lp152.60.1
kernel-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-rt_debug
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-source-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1
kernel-syms-rt
openSUSE:Leap 15.2
From an advisory covering 78 CVEs
 before 5.3.18-lp152.3.5.1
5.3.18-lp152.3.5.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-29373 is a medium vulnerability (CVSS 6.5) in Linux Kernel, published November 28, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in linux 5.6.7-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1 version, 668 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open