Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2020-29372: Linux kernel core dumps may crash during memory advice
CVE-2020-29372 · published 5 years ago
Summary
The Linux kernel versions before 5.6.8, including the Ubuntu flavors listed, have a timing issue when a program creates a core dump while another process uses the IORING_OP_MADVISE command. This race condition can cause the system to become unstable or crash. Update the kernel to a version newer than 5.6.8 or apply the vendor’s security patch to resolve the problem.
What to do
- Update canonical linux-oem-5.6 to version 5.6.0-1010.10.
- Update debian linux to version 5.6.14-1.
- Update linux linux_kernel to version 5.6.8 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 |
< 5.6.0-1010.10 Fix: upgrade to 5.6.0-1010.10
|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Debian:12 | debian | linux |
< 5.6.14-1 Fix: upgrade to 5.6.14-1
|
| – | linux | linux_kernel |
< 5.6.8 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | canonical | ubuntu_linux |
14.04 16.04 18.04 20.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
Original advisory text
An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4...
An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e.
References
- https://ubuntu.com/security/CVE-2020-29372 Third Party Advisory
- https://git.kernel.org/linus/bc0c4d1e176eeb614dc8734fc3ace34292771f11 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-29372 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2020-29372 Vendor Advisory
- http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LS... Third Party Advisory VDB Entry
- https://project-zero.issues.chromium.org/issues/42451131
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2029 Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-362Race Condition
Timeline
Published28 Nov 2020
Updated4 Nov 2026
First seen14 Apr 2026
Track software like this
Free during beta