CVE-2020-10757

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-06-09 · updated 2026-06-17
Weakness: CWE-119

Description

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Affected products

Canonical Ubuntu Linux: 16.04, 18.04, 20.04
Debian Linux: 8.0
Fedoraproject Fedora: 31
Linux kernel: from 4.5 before 4.9.227; from 4.10 before 4.14.184; from 4.15 before 4.19.127; from 4.20 before 5.4.45; from 5.5 before 5.6.17; from 5.7 before 5.7.1 — fixed in 4.14.184, 4.19.127, 4.9.227, 5.4.45, 5.6.17, 5.7.1
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
NetApp Cloud Backup: all versions
NetApp Steelstore Cloud Integrated Storage: all versions
openSUSE Leap: 15.1
Red Hat Enterprise Linux: 7.0, 8.0
RedHat Enterprise Mrg: 2.0

How to fix

Upgrade to a fixed version: Linux kernel 4.14.184, 4.19.127, 4.9.227, 5.4.45. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-10757 or the next vulnerability affects your stack