CVE-2020-29661
Public on 2020-12-09
Modified on 2021-01-26
Description
A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/tty_jobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Severity
Important
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 1 | kernel | 2021-01-26 | ALAS-2021-1477 | Fixed |
| Amazon Linux 2 - Core | kernel | 2021-01-25 | ALAS2-2021-1588 | Fixed |
| Amazon Linux 2 - Kernel-5.4 Extra | kernel | 2022-01-20 | ALAS2KERNEL-5.4-2022-019 | Fixed |
| Amazon Linux 2 - Livepatch Extra | kernel-livepatch-4.14.200-155.322 | 2021-01-19 | ALAS2LIVEPATCH-2021-031 | Fixed |
| Amazon Linux 2 - Livepatch Extra | kernel-livepatch-4.14.203-156.332 | 2021-01-19 | ALAS2LIVEPATCH-2021-032 | Fixed |
| Amazon Linux 2 - Livepatch Extra | kernel-livepatch-4.14.209-160.335 | 2021-01-19 | ALAS2LIVEPATCH-2021-033 | Fixed |
| Amazon Linux 2 - Livepatch Extra | kernel-livepatch-4.14.209-160.339 | 2021-01-19 | ALAS2LIVEPATCH-2021-034 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | CVSSv2 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| NVD | CVSSv3 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |