CVE-2020-15780 PUBLISHED

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

EPSS 0.45% · 63.6th percentile

Risk Scores

EPSS Score
0.45%
63.6th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlinux-raspi5.4.0-1007.7, 5.4.0-1013.13, 5.4.0-1012.12
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1014.15~18.04.1, 0, 5.3.0-1009.10~18.04.1
Ubuntu:18.04:LTSlinux-azure-edge5.0.0-1012.12~18.04.2, 4.18.0-1008.8~18.04.1, 4.18.0-1007.7~18.04.1
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1100.106+cvm1.1, 0, 5.4.0-1063.66+cvm2.2
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1074.81, 4.15.0-1071.78, 4.15.0-1070.77
Ubuntu:18.04:LTSlinux-azure-4.154.15.0-1091.101, 4.15.0-1089.99, 4.15.0-1083.93
Ubuntu:18.04:LTSlinux-kvm4.15.0-1059.60, 4.15.0-1069.70, 4.15.0-1067.68
Ubuntu:20.04:LTSlinux-raspi25.4.0-1004.4, 5.4.0-1006.6, 5.3.0-1015.17
Ubuntu:18.04:LTSlinux-gke-5.05.0.0-1020.20~18.04.1, 5.0.0-1017.17~18.04.1, 5.0.0-1015.15~18.04.1
Ubuntu:20.04:LTSlinux-oracle5.4.0-1008.8, 5.3.0-1002.2, 5.3.0-1008.9
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1047.51~14.04.1, 4.15.0-1049.54~14.04.1, 4.15.0-1050.55~14.04.1
Ubuntu:20.04:LTSlinux-kvm5.4.0-1008.8, 0, 5.3.0-1003.3
Ubuntu:18.04:LTSlinux-hwe4.18.0-14.15~18.04.1, 5.0.0-29.31~18.04.1, 5.0.0-31.33~18.04.1
Ubuntu:20.04:LTSlinux-gcp5.4.0-1019.19, 5.4.0-1018.18, 5.4.0-1008.8
Ubuntu:22.04:LTSlinux-riscv5.15.0-1028.32, 0, 5.13.0-1004.4
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1013.14~18.04.1, 4.18.0-1015.16~18.04.1, 5.0.0-1011.11~18.04.1
Ubuntu:18.04:LTSlinux-azure4.15.0-1032.33, 4.15.0-1035.36, 4.15.0-1036.38
Ubuntu:18.04:LTSlinux-aws4.15.0-1006.6, 4.15.0-1005.5, 4.15.0-1003.3
Ubuntu:18.04:LTSlinux-oracle-5.00, 5.0.0-1007.12~18.04.1, 5.0.0-1008.13~18.04.1
Ubuntu:18.04:LTSlinux-gke-5.35.3.0-1014.15~18.04.1, 5.3.0-1011.12~18.04.1, 5.3.0-1012.13~18.04.1

…and 37 more

Timeline

References

Open in Interactive Console →