01 Record

CVE-2020-28374

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 6.64% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 93.7% of scored records. A rank, not a probability.
NVD base score: 8.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2021-01-13 03:07Z5 YR AGO

Last updated

2024-08-04 16:33Z2 YR AGO

Reserved

2020-11-10

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base
CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

a9a020abc4dfdc27c23280f8e335b505685cf8f810bf54725cc4f2abd58facca

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

fedoraprojectfedoraNot specified—

linuxlinux_kernelNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_mrgNot specified—

redhatrhel_ausNot specified—

redhatrhel_e4sNot specified—

redhatrhel_eusNot specified—

redhatrhel_extras_rtNot specified—

redhatrhel_tusNot specified—

06 References

bugzilla.suse.comhttps://bugzilla.suse.com/show_bug.cgi?id=1178372x_refsource_MISC
cdn.kernel.orghttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.7x_refsource_CONFIRM
github.comhttps://github.com/torvalds/linux/commit/2896c93811e39d63a4d9b63ccf12a8fbc226e5e4x_refsource_CONFIRM
git.kernel.orghttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2896c93811e39d63a4d9b63ccf12a8fbc226e5e4x_refsource_CONFIRM
bugzilla.suse.comhttps://bugzilla.suse.com/attachment.cgi?id=844938x_refsource_MISC
www.openwall.com[oss-security] 20210113 Re: CVE-2020-28374: Linux SCSI target (LIO) unrestricted copy offloadhttp://www.openwall.com/lists/oss-security/2021/01/13/2mailing-listx_refsource_MLIST
www.openwall.com[oss-security] 20210113 Re: CVE-2020-28374: Linux SCSI target (LIO) unrestricted copy offloadhttp://www.openwall.com/lists/oss-security/2021/01/13/5mailing-listx_refsource_MLIST
lists.fedoraproject.orgFEDORA-2021-620fb40359https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZEUPID5DZYLZBIO4BEVLHFUDZZIFL57/vendor-advisoryx_refsource_FEDORA
lists.fedoraproject.orgFEDORA-2021-082e638d02https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTGQDYIEO2GOCOOKADBHEITF44GY55QF/vendor-advisoryx_refsource_FEDORA
packetstormsecurity.comhttp://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.htmlx_refsource_MISC
www.debian.orgDSA-4843https://www.debian.org/security/2021/dsa-4843vendor-advisoryx_refsource_DEBIAN
lists.fedoraproject.orgFEDORA-2021-4a91649cf3https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HK7SRTITN5ABAUOOIGFVR7XE5YKYYAVO/vendor-advisoryx_refsource_FEDORA
lists.debian.org[debian-lts-announce] 20210212 [SECURITY] [DLA 2557-1] linux-4.19 security updatehttps://lists.debian.org/debian-lts-announce/2021/02/msg00018.htmlmailing-listx_refsource_MLIST
security.netapp.comhttps://security.netapp.com/advisory/ntap-20210219-0002/x_refsource_CONFIRM
lists.debian.org[debian-lts-announce] 20210309 [SECURITY] [DLA 2586-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2021/03/msg00010.htmlmailing-listx_refsource_MLIST

07 Fixed in

AlmaLinux 8

kernel-abi-whitelists
Fixed in 4.18.0-240.22.1.el8_3
kernel-tools-libs-devel
Fixed in 4.18.0-240.22.1.el8_3

Arch Linux

linux
Fixed in 5.10.7.arch1-1
linux-hardened
Fixed in 5.10.7.a-1
linux-lts
Fixed in 5.4.89-1
linux-zen
Fixed in 5.10.7.zen1-1

Source: Arch Linux Security Tracker, the Arch Linux security team. Reformatted by exploit.cc.

CloudLinux 8

kernel-abi-whitelists
Fixed in 4.18.0-240.22.1.el8_3
kernel-tools-libs-devel
Fixed in 4.18.0-240.22.1.el8_3

Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.

Debian 12

linux
Fixed in 5.10.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.10.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.10.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.