oss-sec mailing list archives

Re: Linux kernel: powerpc: RTAS calls can be used to compromise kernel integrity


From: Andrew Donnellan <ajd () linux ibm com>
Date: Tue, 24 Nov 2020 01:41:13 +1100

On 9/10/20 12:20 pm, Andrew Donnellan wrote:
The Linux kernel for powerpc has an issue with the Run-Time Abstraction Services (RTAS) interface, allowing root (or CAP_SYS_ADMIN users) in a VM to overwrite some parts of memory, including kernel memory.

This issue impacts guests running on top of PowerVM or KVM hypervisors (pseries platform), and does *not* impact bare-metal machines (powernv platform).
CVE-2020-27777 has been assigned.

--
Andrew Donnellan              OzLabs, ADL Canberra
ajd () linux ibm com             IBM Australia Limited


Current thread: