A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.177-139.253Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 12, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debug-develUpgrade python-perf | Jun 17, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perf | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | May 27, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 12, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 12, 2020 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1012-azureUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gkeop-5.3Upgrade linux-image-gcp-edgeUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-snapdragonUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-virtualUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-4.4.0-1073-awsUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-26-genericUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-gcpUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-1020-gke | May 25, 2020 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub