CVE-2020-12769

Katalog CVE

CVSS 5.5 · Medium EPSS 0,65%

Kerentanan Improper Synchronization pada linux kernel, debian linux +21 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.

Rincian

Terbit di NVD

9 Mei 2020

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-662: Improper Synchronization

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19b61392c5a852b4e8a0bf35aecb9699... exploit · mailing list · patch · advisory vendor
• https://lkml.org/lkml/2020/2/3/559 exploit · mailing list · patch · deskripsi teknis
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200608-0001/ advisory pihak ketiga
• https://usn.ubuntu.com/4391-1/ advisory pihak ketiga