A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perfUpgrade perf-debuginfo | Jun 18, 2020 | May 12, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 12, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Jun 17, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-devel | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-headers | May 27, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 12, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 12, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1011-awsUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-aws-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-gke-5.3Upgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-gkeUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-virtualUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-5.3.0-1022-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-raspiUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gkeop-5.3Upgrade linux-image-gcp-edgeUpgrade linux-image-4.4.0-184-generic-lpae | May 25, 2020 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub