CVE-2020-8835

Vendorfedoraproject, linux, netapp, canonicalProductfedora, linux kernel, h300e firmware, h300s firmware, h410s firmware, h500e firmware, h500s firmware, h610c firmware, h700e firmware, h700s firmware, ubuntu linux, cloud backup, steelstore cloud integrated storage, solidfire, hci management node, a700s firmware, a220 firmware, a320 firmware, a800 firmware, c190 firmware, fas2720 firmware, fas2750 firmware, 8300 firmware, 8700 firmware, a400 firmwareDiscoveredApr 2, 2020UpdatedNov 21, 2024

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

View graph Watch Export

CVSS v3.1

7.8 HIGH

EPSS

6.01%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

ScopeCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Timeline

disclosure → media coverage

Apr 2, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024

Public PoC (7)

github.com/Prabhashaka/Exploitation-CVE-2020-8835 github.com/snappyJack/Rick_write_exp_CVE-2020-8835 github.com/zilong3033/CVE-2020-8835 github.com/SplendidSky/CVE-2020-8835 github.com/digamma-ai/CVE-2020-8835-verification github.com/johnatag/INF8602-CVE-2020-8835 github.com/WhatsWrongAndWhy/CVE-2020-8835

Unverified third-party code — review before executing.