CVE-2020-29374: Debian Linux

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Linux Linux Kernel: before 5.7.3 (fixed in 5.7.3)
• Netapp 500f Firmware: affected versions not specified
• Netapp a250 Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp Hci Compute Node BIOS: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire & Hci Storage Node: affected versions not specified

Published 2020-11-28. Last modified 2026-10-08.