linux linux-kernel CVE-2020-35508 vulnerability in Linux and Other Products
Published on March 26, 2021

product logo product logo product logo
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

NVD

Weakness Type

Improper Initialization

The software does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used. This can have security implications when the associated resource is expected to have certain properties or values, such as a variable that determines whether a user has been authenticated or not.


Products Associated with CVE-2020-35508

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-35508 are published in these products:

Linux Kernel
 
Red Hat Enterprise Linux (RHEL)
 
NetApp Brocade Fabric Operating System Firmware
 

Exploit Probability

EPSS
0.05%
Percentile
16.34%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.