VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 20, 2020· Updated Jun 17, 2026

CVE-2020-15852

CVE-2020-15852

Description

An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of synchronization between the I/O bitmaps of TSS and Xen, aka CID-cadfad870154.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • NetApp/Cloud Backup
    cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
  • NetApp/Steelstore Cloud Integrated Storage
    cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
  • NetApp/Solidfire Baseboard Management Controller
    cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*
  • Linux/Kernel2 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.5,<=5.7.9
    • (no CPE)range: 5.5 - 5.7.9
  • Xen/Xen2 versions
    cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*range: <=4.13.1
    • (no CPE)range: <=4.13.x
  • Linux/Linux kerneldescription

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.