CVE-2020-12769

Vendordebian, linux, netapp, canonical, opensuseProductdebian linux, linux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h610c firmware, h610s firmware, h615c firmware, h700e firmware, h700s firmware, ubuntu linux, leap, active iq unified manager, cloud backup, element software, steelstore cloud integrated storage, solidfire, hci management node, a700s firmware, hci compute node firmwareDiscoveredMay 9, 2020UpdatedNov 21, 2024

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.

View graph Watch Export

CVSS v3.1

5.5 MEDIUM

EPSS

0.65%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Timeline

disclosure → media coverage

May 9, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024