VulnSocial

CVE-2020-29374Patch(debian / 500f)

LOWCVSS 3.6 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch debian 500f systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

debian CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-362CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 500f
  • 500f_firmware
  • a250
  • a250_firmware

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
debianlinuxnetapp
Products
500f500f_firmwarea250a250_firmwaredebian_linuxh410ch410c_firmwarehci_compute_node_bioslinux_kernelsolidfire_\&_hci_management_node

3 versions affected across 11 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-10: 1Patch / Workaround · 2026-06-10: 1Technical Details · 2026-06-10: 106-10
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Can Artuc@canartuc
    Patch

    Askar Safin posted a patchset that turns vmsplice() into a thin wrapper over preadv2/pwritev2: ~200 lines gone, 30 added. Hellwig: one of the few paths that can dirty file-backed pages without telling the filesystem. CVE-2020-29374 in its history. Delete the syscall outright?

    Post summary

    Askar Safin shared a patch that reformulates vmsplice() into a thin wrapper over preadv2/pwritev2, effectively mitigating CVE‑2020‑29374, which can dirty file‑backed pages without notifying the filesystem.

    0000036
    170 followersView on X
CPE platform detail12 entries

12 of 12 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux10.0--
OSdebiandebian_linux9.0--
OSlinuxlinux_kernel---
HWnetapp500f---
OSnetapp500f_firmware---
HWnetappa250---
OSnetappa250_firmware---
HWnetapph410c---
OSnetapph410c_firmware---
OSnetapphci_compute_node_bios---
Appnetappsolidfire_\&_hci_management_node---
Appnetappsolidfire_\&_hci_storage_node---

Explore more

Back to dashboarddebian CVEslinux CVEsnetapp CVEs500f vulnerabilities