Re: [oss-security] CVE-2020-25656: Linux kernel concurrency UAF in vt_do_kdgkb_ioctl

2020-10-16 Thread Greg KH
On Fri, Oct 16, 2020 at 08:58:34AM +0200, Jiri Slaby wrote: > Cc Greg. > > On 16. 10. 20, 5:39, Minh Yuan wrote: > > Hi, > > > > We recently discovered a uaf read in vt_do_kdgkb_ioctl from linux kernel > > version 3.4 to the latest version (v5.9 for now). > > > > The root cause of this vulnerabi

Re: [oss-security] CVE-2020-25656: Linux kernel concurrency UAF in vt_do_kdgkb_ioctl

2020-10-15 Thread Jiri Slaby
Cc Greg. On 16. 10. 20, 5:39, Minh Yuan wrote: Hi, We recently discovered a uaf read in vt_do_kdgkb_ioctl from linux kernel version 3.4 to the latest version (v5.9 for now). The root cause of this vulnerability is that there exits a race in KDGKBSENT and KDSKBSENT. Here are details: 1. use K