A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf | Jun 18, 2020 | May 12, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 12, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-headers | May 27, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 12, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 12, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-gkeUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-azure-edgeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-gkeop-5.3Upgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-genericUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-raspiUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc-e500mc | May 25, 2020 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub