CVE-2020-27815

Description

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

References

https://www.openwall.com/lists/oss-security/2020/12/28/1%2C

https://www.openwall.com/lists/oss-security/2020/11/30/5%2C

https://www.debian.org/security/2021/dsa-4843

https://security.netapp.com/advisory/ntap-20210702-0004/

https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html

https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61b3e4839007668360ed8b87d7da96d2e59fc6c

https://bugzilla.redhat.com/show_bug.cgi?id=1897668%2C

http://www.openwall.com/lists/oss-security/2020/12/28/1

http://www.openwall.com/lists/oss-security/2020/11/30/5

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3