CVE-2020-14386: Privilege Escalation Vulnerability in the Linux kernel
Summary: Palo Alto Networks researchers found CVE-2020-14386, a memory corruption bug in the Linux kernel's tpacket_rcv function that lets an unprivileged user escalate to root. The arithmetic flaw was introduced in a July 19, 2008 commit and became triggerable for memory corruption in February 2016, and the constraints it requires are satisfied by default on distributions like Ubuntu.
Bottom line: Triggering it needs only AF_PACKET sockets and CAP_NET_RAW, which an unprivileged user namespace can supply on a default Ubuntu install, so a local user with no special rights can reach root; the researchers' exploitation path zeroes 1-10 bytes behind a page allocation to corrupt an sctp_shared_key refcount and convert it into a use-after-free.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-8655CVE-2017-7308CVE-2020-14386
- Related
- Exploiting the Linux kernel via packet sockets Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026