CVE-2020-12652

CVE-2020-12652 is a race condition vulnerability, specifically a "double fetch" issue, found in the mptctl_ioctl function within the Linux kernel's mptctl.c driver, affecting versions prior to 5.4.14. This flaw allows a local, privileged user to trigger a race condition due to incorrect lock handling during an ioctl operation. The vulnerability has a CVSS score of 4.1 (Medium), indicating a low attack complexity and requiring high privileges for exploitation. While it could lead to high availability impact, the vendor notes that its security impact is mitigated as it requires root access, which already grants significant system control. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed on the CISA KEV catalog.