CVE-2020-10711 is a NULL pointer dereference flaw in the Linux kernel's SELinux subsystem, affecting versions before 5.7, including distributions like Canonical, Debian, and Red Hat. This vulnerability arises during the import of the Commercial IP Security Option (CIPSO) category bitmap, where a security attribute is incorrectly set, leading to a NULL pointer dereference. Rated Medium (CVSS 5.9), it allows a remote, unauthenticated attacker to crash the system kernel, resulting in a denial of service, though high attack complexity is noted. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.7CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
2.0CPE matchmatch criteria | cpe:2.3:a:redhat:3scale:2.0:*:*:*:*:*:*:* | ||
13CPE matchmatch criteria | cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* | ||
4.0CPE matchmatch criteria | cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2020-10711
Sep 8, 2020Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic
May 12, 2020A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine it sets the security attribute to indicate that the category bitmap is present even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel resulting in a denial of service.
May 12, 2020