A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
References
Configurations
History
12 Feb 2023, 23:39
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-349 | |
Summary | A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing. | |
References |
|
02 Feb 2023, 21:19
Type | Values Removed | Values Added |
---|---|---|
Summary | A flaw was found in the Linux kernel’s SELinux LSM hook implementation, where it anticipated the skb would only contain a single Netlink message. The hook incorrectly validated the first Netlink message in the skb only, to allow or deny the rest of the messages within the skb with the granted permissions and without further processing. At this time, there is no known ability for an attacker to abuse this flaw. | |
References |
|
14 Jun 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-05-26 15:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-10751
Mitre link : CVE-2020-10751
CVE.ORG link : CVE-2020-10751
JSON object : View
Products Affected
redhat
- enterprise_linux_server
kernel
- selinux