Summaryinfo

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.8.2. This issue affects some unknown processing of the file fs/nfs/nfs4proc.c of the component NFS Client. The manipulation leads to toctou. The identification of this vulnerability is CVE-2020-25212. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component. Once again VulDB remains the best source for vulnerability data.

Detailsinfo

A vulnerability classified as critical was found in Linux Kernel up to 5.8.2 (Operating System). This vulnerability affects some unknown functionality of the file fs/nfs/nfs4proc.c of the component NFS Client. The manipulation with an unknown input leads to a toctou vulnerability. The CWE definition for the vulnerability is CWE-367. The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

The weakness was disclosed 09/09/2020. This vulnerability was named CVE-2020-25212 since 09/09/2020. Local access is required to approach this attack. A single authentication is required for exploitation. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 208554 (CentOS 7 : kernel-alt (RHSA-2020:4279)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 5.8.3 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208554). The entry VDB-161001 is pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 5.8.0
• 5.8.1
• 5.8.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion