CVE-2020-10766

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.

• CWE-440

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832ePatch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832ePatch, Vendor Advisory

Published

Sep 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10760A use-after-free flaw was found in all samba LDAP server ver…6.5
• CVE-2020-10761An assertion failure issue was found in the Network Block De…5
• CVE-2020-10762An information-disclosure flaw was found in the way that glu…5.5
• CVE-2020-10763An information-disclosure flaw was found in the way Heketi b…5.5
• CVE-2020-10764Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10765Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the i…5.5
• CVE-2020-10768A flaw was found in the Linux Kernel before 5.8-rc1 in the p…5.5
• CVE-2020-10769A buffer over-read flaw was found in RH kernel versions befo…5.5
• CVE-2020-1077An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-10770A flaw was found in Keycloak before 13.0.0, where it is poss…5.3
• CVE-2020-10771A flaw was found in Infinispan version 10, where it is possi…7.1