CVE-2020-12652

MEDIUM Year: 2020
CVSS v3 Score
4.1
Medium
CVSS v2 Score
4.7
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."

Related Vulnerabilities

CVE-2009-5152

MEDIUM
CVSS:4.1(Medium)

Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU), which allows privileged local users to ...

CWE-3622009

CVE-2020-0199

MEDIUM
CVSS:4.1(Medium)

In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges...

CWE-3622020

CVE-2021-22340

MEDIUM
CVSS:4.1(Medium)

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this v...

CWE-3622021

CVE-2021-39648

MEDIUM
CVSS:4.1(Medium)

In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privilege...

CWE-3622021

CVE-2021-39727

MEDIUM
CVSS:4.1(Medium)

In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. This could lead to local information disclos...

CWE-3622021

CVE-2021-39792

MEDIUM
CVSS:4.1(Medium)

In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privilege...

CWE-3622021