CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

Score

CVSS 3.1 4.5 Medium

Status

Modified - secalert@redhat.com

Published

2021-03-26

Last modified

2024-08-04

Weaknesses

CWE-362, CWE-665

Affected products

• Linux Kernel (Linux)
• A700s Firmware (Netapp)
• Aff A400 Firmware (Netapp)
• Brocade Fabric Operating System Firmware (Netapp)
• Fas8300 Firmware (Netapp)
• Fas8700 Firmware (Netapp)
• H300e Firmware (Netapp)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500e Firmware (Netapp)
• H500s Firmware (Netapp)
• H610c Firmware (Netapp)
• H610s Firmware (Netapp)
• H615c Firmware (Netapp)
• H700e Firmware (Netapp)
• H700s Firmware (Netapp)
• Enterprise Linux (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1902724
• https://github.com/torvalds/linux/commit/b4e00444cab4c3f3fec876dc0cccc8cbb0d1a948
• https://security.netapp.com/advisory/ntap-20210513-0006/