Vulnerability · Published Jul 15, 2020 · Assigned by mitre
CVE-2020-15780
Medium 6.7
In plain English
A medium-severity security flaw in the linux package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)1.4%top 28.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 5.7.10-1 | DEBIAN-CVE-2020-15780 |
| Debian:13 | linux | 5.7.10-1 | DEBIAN-CVE-2020-15780 |
| Debian:14 | linux | 5.7.10-1 | DEBIAN-CVE-2020-15780 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2020-15780 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2020-15780 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2020-15780 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2020-15780 |
Affected products (as reported)
References
- https://git.zx2c4.com/american-unsigned-language/tree/american-unsigned-language-2.sh x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2020/06/15/3 x_refsource_MISC
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=75b0cea7bf307f362057cc778efe89af4c615354 x_refsource_MISC
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7 x_refsource_MISC
- [oss-security] 20200720 Re: Re: lockdown bypass on mainline kernel for loading unsigned modules mailing-list, x_refsource_MLIST
- [oss-security] 20200729 multiple secure boot grub2 and linux kernel vulnerabilities mailing-list, x_refsource_MLIST
- [oss-security] 20200730 Re: UEFI SecureBoot bypass fixes rolled out to kernels below radar mailing-list, x_refsource_MLIST
- [oss-security] 20200730 UEFI SecureBoot bypass fixes rolled out to kernels below radar mailing-list, x_refsource_MLIST
- USN-4425-1 vendor-advisory, x_refsource_UBUNTU
- USN-4439-1 vendor-advisory, x_refsource_UBUNTU
- USN-4426-1 vendor-advisory, x_refsource_UBUNTU
- USN-4440-1 vendor-advisory, x_refsource_UBUNTU
- openSUSE-SU-2020:1153 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1236 vendor-advisory, x_refsource_SUSE