CVE-2020-11884: Canonical Ubuntu Linux

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

Affected products

Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 19.10 only; version 20.04 only
Debian Debian Linux: version 10.0 only
Fedoraproject Fedora: version 30 only; version 31 only; version 32 only
Linux Linux Kernel: from 4.15, before 4.19.119 (fixed in 4.19.119); from 4.20, before 5.4.36 (fixed in 5.4.36); from 5.5, before 5.6.8 (fixed in 5.6.8)
Netapp a700s Firmware: affected versions not specified
Netapp Active Iq Unified Manager: affected versions not specified
Netapp Bootstrap OS: affected versions not specified
Netapp Cloud Backup: affected versions not specified
Netapp Element Software: affected versions not specified
Netapp h300e Firmware: affected versions not specified
Netapp h300s Firmware: affected versions not specified
Netapp h410c Firmware: affected versions not specified
Netapp h410s Firmware: affected versions not specified
Netapp h500e Firmware: affected versions not specified
Netapp h500s Firmware: affected versions not specified
Netapp h610c Firmware: affected versions not specified
Netapp h610s Firmware: affected versions not specified
Netapp h700e Firmware: affected versions not specified
Netapp h700s Firmware: affected versions not specified
Netapp Hci Management Node: affected versions not specified
Netapp Solidfire: affected versions not specified
Netapp Solidfire Baseboard Management Controller: affected versions not specified
Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2020-04-29. Last modified 2026-06-17.