A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.
CVSS Details
- CVSS 3.1 Base Score: 4.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 26, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Mar 26, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 6, 2021 | Dec 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 21, 2021 | Mar 26, 2021 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-raspiUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-gke | Feb 26, 2021 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub