An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7.
Priority LOW 32CWE-862Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-862.
Summary
An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
Why it matters now
EPSS 0.01368 72nd percentileScored 2026-11-07
Fix Fixed Red Hat: 4 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | before 5.7.7 | Vulnerable | Linux |
| cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* | 15.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* | 15.2 | Vulnerable | openSUSE |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* | 20.04 | Vulnerable | Canonical |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 5.7.7 Vulnerable ·Linux
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Vulnerable ·openSUSE
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical
Remediation
Red Hat 4 advisories
- RHSA-2020:3228 Released 2020-07-29 · Red Hat rating Moderatekernel security and bug fix update
- Red Hat Enterprise Linux BaseOS E4S (v. 8.0) bpftool-4.18.0-80.27.2.el8_0, kernel-4.18.0-80.27.2.el8_0, kernel-abi-whitelists-4.18.0-80.27.2.el8_0 +16
- RHSA-2020:3222 Released 2020-07-29 · Red Hat rating Importantkernel security and bug fix update
- Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.24.2.el8_1
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.24.2.el8_1, kernel-4.18.0-147.24.2.el8_1, kernel-abi-whitelists-4.18.0-147.24.2.el8_1 +19
- RHSA-2020:3218 Released 2020-07-29 · Red Hat rating Moderatekernel security and bug fix update
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-193.14.3.el8_2
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-193.14.3.el8_2, kernel-4.18.0-193.14.3.el8_2, kernel-abi-whitelists-4.18.0-193.14.3.el8_2 +21
Show 1 more Red Hat advisories
- RHSA-2020:3219 Released 2020-07-29 · Red Hat rating Moderatekernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-193.14.3.rt13.67.el8_2, kernel-rt-core-4.18.0-193.14.3.rt13.67.el8_2, kernel-rt-debug-4.18.0-193.14.3.rt13.67.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-193.14.3.rt13.67.el8_2, kernel-rt-core-4.18.0-193.14.3.rt13.67.el8_2, kernel-rt-debug-4.18.0-193.14.3.rt13.67.el8_2 +9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat CodeReady Linux Builder (v. 8) | Fixed | RHSA-2020:3218 |
| Red Hat CodeReady Linux Builder EUS (v. 8.1) | Fixed | RHSA-2020:3222 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2020:3218 |
| Red Hat Enterprise Linux BaseOS E4S (v. 8.0) | Fixed | RHSA-2020:3228 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.1) | Fixed | RHSA-2020:3222 |
| Red Hat Enterprise Linux Real Time (v. 8) | Fixed | RHSA-2020:3219 |
| Red Hat Enterprise Linux Real Time for NFV (v. 8) | Fixed | RHSA-2020:3219 |
Not affected: 4 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise MRG 2
Timeline
- 2026-10-02 Threatist record created from CVE-2020-15780
- 2026-10-03 Alias added: GHSA-j334-hj6g-m96m
References
Patch 3
Advisory 11
- https://www.openwall.com/lists/oss-security/2020/06/15/3
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7
- [oss-security] 20200729 multiple secure boot grub2 and linux kernel vulnerabilities
- [oss-security] 20200730 Re: UEFI SecureBoot bypass fixes rolled out to kernels below radar
- [oss-security] 20200730 UEFI SecureBoot bypass fixes rolled out to kernels below radar
- USN-4425-1
- USN-4439-1
- USN-4426-1
- USN-4440-1
- openSUSE-SU-2020:1153
- openSUSE-SU-2020:1236
Sources
- CVE-2020-15780 · CVE Program
- CVE-2020-15780 · NVD
- FIRST EPSS
- GHSA-j334-hj6g-m96m · GitHub Advisory Database · CC BY 4.0
- CVE-2020-15780 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences