CVE-2020-8025: 
Linux openSUSE vulnerability analysis and mitigation

CVE-2020-8025 affects the Performance Co-Pilot (PCP) package, specifically related to outdated entries in permissions profiles for /var/lib/pcp/tmp/* directories. The vulnerability was discovered in May 2020 when the security team was performing sanity checks on profiles in the Base:System/permissions package (SUSE Bugzilla).

The vulnerability stems from inconsistent directory permissions in the PCP package. When the chkstat tool is called during package installations, it applies permissions from profiles that no longer match the package's intended configuration. This results in directories previously owned by pcp:pcp with mode 0775 being changed to public sticky bit directories or root:root ownership, depending on the permissions profile used (SUSE Bugzilla).

The vulnerability allows local users to place files in affected directories, which could contain binary data structures used by PCP tools. An attacker could potentially place fake data or malicious content that could cause PCP programs to crash or misbehave. Since PCP daemons run under an unprivileged user, the direct risk of root exploitation is limited (SUSE Bugzilla).

The vulnerability requires local system access and primarily affects systems using the 'easy' permissions profile. The 'secure' and 'paranoid' profile settings mainly result in broken functionality rather than security issues (SUSE Bugzilla).

The fix involves removing the outdated PCP entries from the permissions package profiles and ensuring correct permissions are applied through package updates. Updates were released for various SUSE Linux Enterprise versions and openSUSE Leap distributions (SUSE Bugzilla).