A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Jun 18, 2020 | May 12, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 12, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Jun 17, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-devel | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-sourceUpgrade python-perfUpgrade perf | May 27, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 12, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 12, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-raspiUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-aws-edgeUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-azure-edgeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-26-genericUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-virtualUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-powerpc64-smp | May 25, 2020 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub