5.5
Medium
CVE-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect…
Description
A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel | Versions not published |
References
- git.kernel.org git.kernel.org
- bugzilla.redhat.com bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of kernel
The 13 CVEs of kernel →
CVE-2022-2785
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs…
6.7
Medium
CVE-2021-22600
Linux Kernel Privilege Escalation Vulnerability
6.6
Medium
CVE-2020-14386
A flaw was found in the Linux kernel before 5.9-rc4
6.7
Medium
CVE-2020-10781
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the…
5.5
Medium