Early Access — Mondoo Vulnerability Intelligence is currently in preview.

UBUNTU-CVE-2020-12659

MEDIUM6.7

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom vali

Published May 5, 2020

Modified 7 months ago

Fix available

Details

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

Affected Packages

Ubuntu:20.04:LTSlinux

Affected versions:

5.3.0-18.195.3.0-24.265.4.0-18.225.4.0-21.255.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.35+2 more

Fixed in:

5.4.0-37.41

Ubuntu:16.04:LTSlinux

Fixed in:

4.2.0-16.19

Ubuntu:18.04:LTSlinux

Fixed in:

4.13.0-16.19

Ubuntu:16.04:LTSlinux-aws

Fixed in:

4.4.0-1001.10

Ubuntu:20.04:LTSlinux-aws

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.55.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.11

Fixed in:

5.4.0-1015.15

Ubuntu:18.04:LTSlinux-aws

Fixed in:

4.15.0-1001.1

Ubuntu:Pro:18.04:LTSlinux-aws-5.0

Affected versions:

5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30

Ubuntu:18.04:LTSlinux-aws-5.3

Affected versions:

5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.1

Fixed in:

5.3.0-1023.25~18.04.1

Ubuntu:18.04:LTSlinux-aws-5.4

Fixed in:

5.4.0-1018.18~18.04.1

Ubuntu:16.04:LTSlinux-aws-hwe

Fixed in:

4.15.0-1030.31~16.04.1

Ubuntu:20.04:LTSlinux-azure

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.85.4.0-1009.95.4.0-1010.105.4.0-1012.12

Fixed in:

5.4.0-1016.16

Ubuntu:Pro:18.04:LTSlinux-azure

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.94.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.19+34 more

Ubuntu:16.04:LTSlinux-azure

Fixed in:

4.11.0-1009.9

Ubuntu:18.04:LTSlinux-azure-4.15

Fixed in:

4.15.0-1082.92

Ubuntu:18.04:LTSlinux-azure-5.3

Affected versions:

5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.1+1 more

Fixed in:

5.3.0-1028.29~18.04.1

Ubuntu:18.04:LTSlinux-azure-5.4

Fixed in:

5.4.0-1020.20~18.04.1

Ubuntu:Pro:18.04:LTSlinux-azure-edge

Affected versions:

4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2

Ubuntu:Pro:18.04:LTSlinux-gcp

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.84.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.18+28 more

Ubuntu:20.04:LTSlinux-gcp

Affected versions:

5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.11

Fixed in:

5.4.0-1015.15

Ubuntu:16.04:LTSlinux-gcp

Fixed in:

4.10.0-1004.4

Ubuntu:18.04:LTSlinux-gcp-4.15

Fixed in:

4.15.0-1071.81

Ubuntu:18.04:LTSlinux-gcp-5.3

Affected versions:

5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.15.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.1

Fixed in:

5.3.0-1026.28~18.04.1

Ubuntu:18.04:LTSlinux-gcp-5.4

Fixed in:

5.4.0-1019.19~18.04.2

Ubuntu:Pro:18.04:LTSlinux-gcp-edge

Affected versions:

4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.14.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.1+2 more

Ubuntu:18.04:LTSlinux-gke-4.15

Fixed in:

4.15.0-1030.32

Ubuntu:18.04:LTSlinux-gke-5.0

Affected versions:

5.0.0-1011.11~18.04.15.0.0-1013.13~18.04.15.0.0-1015.15~18.04.15.0.0-1017.17~18.04.15.0.0-1020.20~18.04.15.0.0-1022.22~18.04.35.0.0-1023.23~18.04.25.0.0-1025.26~18.04.15.0.0-1026.27~18.04.25.0.0-1027.28~18.04.1+6 more

Fixed in:

5.0.0-1042.43

Ubuntu:18.04:LTSlinux-gke-5.3

Affected versions:

5.3.0-1011.12~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.15.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.1

Fixed in:

5.3.0-1026.28~18.04.1

Ubuntu:18.04:LTSlinux-hwe

Affected versions:

4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.14.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.1+18 more

Fixed in:

5.3.0-59.53~18.04.1

Ubuntu:16.04:LTSlinux-hwe

Fixed in:

4.8.0-36.36~16.04.1

Ubuntu:18.04:LTSlinux-hwe-5.4

Fixed in:

5.4.0-37.41~18.04.1

Ubuntu:Pro:18.04:LTSlinux-hwe-edge

Affected versions:

5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.15.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2

Ubuntu:Pro:16.04:LTSlinux-hwe-edge

Affected versions:

4.10.0-14.16~16.04.14.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.3+13 more

Ubuntu:18.04:LTSlinux-kvm

Fixed in:

4.15.0-1002.2

Ubuntu:20.04:LTSlinux-kvm

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.65.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.11

Fixed in:

5.4.0-1015.15

Ubuntu:16.04:LTSlinux-kvm

Fixed in:

4.4.0-1004.9

Ubuntu:18.04:LTSlinux-oem

Fixed in:

4.15.0-1002.3

Ubuntu:20.04:LTSlinux-oem-5.6

Affected versions:

5.6.0-1007.75.6.0-1008.8

Fixed in:

5.6.0-1010.10

Ubuntu:18.04:LTSlinux-oem-osp1

Affected versions:

5.0.0-1010.115.0.0-1012.135.0.0-1015.165.0.0-1018.205.0.0-1020.225.0.0-1022.245.0.0-1024.275.0.0-1025.285.0.0-1027.315.0.0-1028.32+10 more

Fixed in:

5.0.0-1059.64

Ubuntu:20.04:LTSlinux-oracle

Affected versions:

5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.11

Fixed in:

5.4.0-1015.15

Ubuntu:18.04:LTSlinux-oracle

Fixed in:

4.15.0-1007.9

Ubuntu:16.04:LTSlinux-oracle

Fixed in:

4.15.0-1007.9~16.04.1

Ubuntu:Pro:18.04:LTSlinux-oracle-5.0

Affected versions:

5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19

Ubuntu:18.04:LTSlinux-oracle-5.3

Affected versions:

5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1

Fixed in:

5.3.0-1024.26~18.04.1

Ubuntu:18.04:LTSlinux-oracle-5.4

Fixed in:

5.4.0-1019.19~18.04.1

Ubuntu:20.04:LTSlinux-raspi

Affected versions:

5.4.0-1007.75.4.0-1008.85.4.0-1011.11

Fixed in:

5.4.0-1012.12

Ubuntu:18.04:LTSlinux-raspi-5.4

Fixed in:

5.4.0-1013.13~18.04.1

Ubuntu:16.04:LTSlinux-raspi2

Fixed in:

4.2.0-1013.19

Ubuntu:18.04:LTSlinux-raspi2

Fixed in:

4.13.0-1005.5

Ubuntu:Pro:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6

Ubuntu:18.04:LTSlinux-raspi2-5.3

Affected versions:

5.3.0-1017.19~18.04.15.3.0-1018.20~18.04.15.3.0-1019.21~18.04.15.3.0-1021.23~18.04.15.3.0-1022.24~18.04.15.3.0-1023.25~18.04.15.3.0-1026.28~18.04.1

Fixed in:

5.3.0-1027.29~18.04.1

Ubuntu:20.04:LTSlinux-riscv

Affected versions:

5.4.0-24.285.4.0-26.30

Fixed in:

5.4.0-27.31

Ubuntu:16.04:LTSlinux-snapdragon

Affected versions:

4.4.0-1012.124.4.0-1013.14

Fixed in:

4.4.0-1013.15

Ubuntu:18.04:LTSlinux-snapdragon

Fixed in:

4.4.0-1077.82

References

REPORThttps://bugzilla.kernel.org/show_bug.cgi?id=207225 REPORThttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 REPORThttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02 REPORThttps://git.kernel.org/linus/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 REPORThttps://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 REPORThttps://ubuntu.com/security/CVE-2020-12659 REPORThttps://ubuntu.com/security/notices/USN-4387-1 REPORThttps://ubuntu.com/security/notices/USN-4388-1 REPORThttps://ubuntu.com/security/notices/USN-4389-1 REPORThttps://www.cve.org/CVERecord?id=CVE-2020-12659

CVSS Analysis

CVSS v3.1

6.7

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Related

CVE-2020-12659 USN-4387-1 USN-4388-1 USN-4389-1

Ecosystems

Ubuntu 20.04 LTS Ubuntu 16.04 LTS Ubuntu 18.04 LTS Ubuntu Pro 18.04 LTS Ubuntu Pro 16.04 LTS Ubuntu Pro 20.04 LTS

Timeline

PublishedMay 5, 2020

ModifiedJun 10, 2025

UBUNTU-CVE-2020-12659 | Mondoo Vulnerability Intelligence