CVE-2020-10757: linux kernel +9 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-10757

CVSS 7.8 · High EPSS 0,99%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada linux kernel, opensuse leap +8 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Rincian

Terbit di NVD: 9 Juni 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
EPSS (30 hari): 0,99% peluang dieksploitasi; lebih tinggi dari 61,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 4.5 hingga sebelum 4.9.227
linux	linux kernel	Versi 4.10 hingga sebelum 4.14.184
linux	linux kernel	Versi 4.15 hingga sebelum 4.19.127
linux	linux kernel	Versi 4.20 hingga sebelum 5.4.45
linux	linux kernel	Versi 5.5 hingga sebelum 5.6.17
linux	linux kernel	Versi 5.7 hingga sebelum 5.7.1
opensuse	leap	Versi 15.1
redhat	enterprise linux	Versi 7.0
redhat	enterprise linux	Versi 8.0
redhat	enterprise mrg	Versi 2.0
fedoraproject	fedora	Versi 31
debian	debian linux	Versi 8.0
canonical	ubuntu linux	Versi 16.04
canonical	ubuntu linux	Versi 18.04
canonical	ubuntu linux	Versi 20.04
netapp	active iq unified manager	Semua versi
netapp	cloud backup	Semua versi
netapp	steelstore cloud integrated storage	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789... patch · advisory vendor
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html mailing list · patch · advisory pihak ketiga
https://bugzilla.redhat.com/show_bug.cgi?id=1842525 issue tracking · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html mailing list · advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEM47BXZJLODR... advisory pihak ketiga · vdb entry
https://security.netapp.com/advisory/ntap-20200702-0004/ advisory pihak ketiga
https://usn.ubuntu.com/4426-1/ advisory pihak ketiga · vdb entry
https://usn.ubuntu.com/4439-1/ advisory pihak ketiga
https://usn.ubuntu.com/4440-1/ advisory pihak ketiga · vdb entry
https://usn.ubuntu.com/4483-1/ advisory pihak ketiga · vdb entry
https://www.debian.org/security/2020/dsa-4698 advisory pihak ketiga
https://www.debian.org/security/2020/dsa-4699 advisory pihak ketiga
https://www.openwall.com/lists/oss-security/2020/06/04/4 exploit · mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.