A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.177-139.253Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 12, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Jun 17, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perf | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perf | May 27, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 12, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 12, 2020 |
| Ubuntu | — | Upgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-gkeop-5.3Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-aws-edgeUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-oracleUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-gke | May 25, 2020 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub