CVE-2020-12659
Fixed in a distro release EPSS <1%
An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
Products: linux_kernel, netapp active_iq_unified_manager, netapp cloud_backup, netapp hci_baseboard_management_controller, netapp solidfire_&_hci_management_node, netapp steelstore_cloud_integrated_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | kernel-tools-libs-devel | 4.18.0-240.el8 |
| Debian 12 | linux | 5.6.7-1 |
| Debian 13 | linux | 5.6.7-1 |
| Debian 14 | linux | 5.6.7-1 |
| Red Hat Enterprise Linux 8 | bpftool | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | bpftool-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-abi-whitelists | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-core | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug-core | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug-devel | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules-extra | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-aarch64 | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-ppc64le | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-s390x | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-x86_64 | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-devel | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-doc | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-modules | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-modules-extra | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-core | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-core | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-debuginfo | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-devel | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-kvm | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules-extra | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo-common-x86_64 | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-devel | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-kvm | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules-extra | 0:4.18.0-240.rt7.54.el8 |
| Red Hat Enterprise Linux 8 | kernel-tools | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-tools-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs-devel | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-core | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-devel | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules-extra | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | perf | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | perf-debuginfo | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | python3-perf | 0:4.18.0-240.el8 |
| Red Hat Enterprise Linux 8 | python3-perf-debuginfo | 0:4.18.0-240.el8 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_5 | 1-8.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_12 | 1-3.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-zfcpdump | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-docs | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-obs-build | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-syms | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-source-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-syms-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt_debug | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-syms-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-docs | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-obs-build | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt_debug | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-source-rt | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-syms-rt | 4.12.14-14.28.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | 5.3.0-1023.25~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1028.29~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | 5.3.0-1026.28~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.0 | 5.0.0-1042.43 |
| Ubuntu 18.04 LTS | linux-gke-5.3 | 5.3.0-1026.28~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe | 5.3.0-59.53~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem-osp1 | 5.0.0-1059.64 |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | 5.3.0-1024.26~18.04.1 |
| Ubuntu 18.04 LTS | linux-raspi2-5.3 | 5.3.0-1027.29~18.04.1 |
| Ubuntu 20.04 LTS | linux | 5.4.0-37.41 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1015.15 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1016.16 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1015.15 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1015.15 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | 5.6.0-1010.10 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1015.15 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1012.12 |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | 5.4.0-27.31 |
| openSUSE Leap 15.1 | kernel-debug | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-default | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-docs | 4.12.14-lp151.28.52.2 |
| openSUSE Leap 15.1 | kernel-kvmsmall | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-obs-build | 4.12.14-lp151.28.52.3 |
| openSUSE Leap 15.1 | kernel-obs-qa | 4.12.14-lp151.28.52.3 |
| openSUSE Leap 15.1 | kernel-source | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-syms | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-vanilla | 4.12.14-lp151.28.52.1 |