CVE-2020-35508

MediumCVSS 4.5/10Last modified Jun 17, 2026

Description

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

Metrics

CVSS 3.1 4.5/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-665 CWE-362

Affected software

Vendor	Product	Versions
n/a	kernel	kernel 5.12

References

https://bugzilla.redhat.com/show_bug.cgi?id=1902724Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/b4e00444cab4c3f3fec876dc0cccc8cbb0d1a948Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20210513-0006/Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1902724Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/b4e00444cab4c3f3fec876dc0cccc8cbb0d1a948Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20210513-0006/Third Party Advisory

Timeline

Published: Mar 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-355095.4A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticato CVE-2020-35516.1A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke CVE-2020-355105.9A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever i CVE-2020-355117.8A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.CVE-2020-355127.8A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older bran CVE-2020-355134.9A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the wa CVE-2020-355147.0An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a r CVE-2020-355178.2A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest us CVE-2020-355185.3When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used CVE-2020-355197.8An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check fa CVE-2020-35527.4A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attac CVE-2020-355215.5A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial