ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.
An official patch is available. Apply the patch as soon as possible.
4.5
CVSS
0.4
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityHigh
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityLow
IntegrityLow
AvailabilityLow
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21nvdAV: P→L, PR: H→L, UI: A→N, VC: N→L, VI: N→L, VA: N→L0.0 → 0.4
2026-07-21nvdpatch: Unavailable→Official Patch0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0

Affected Software
VendorProductVersion
linuxlinux_kernel< 5.12
linuxlinux_kernel5.12
n/akernelkernel 5.12
netappa700s_firmwareAll versions
netappaff_a400_firmwareAll versions
netappbrocade_fabric_operating_system_firmwareAll versions
netappfas8300_firmwareAll versions
netappfas8700_firmwareAll versions
netapph300e_firmwareAll versions
netapph300s_firmwareAll versions
netapph410c_firmwareAll versions
netapph410s_firmwareAll versions
netapph500e_firmwareAll versions
netapph500s_firmwareAll versions
netapph610c_firmwareAll versions
netapph610s_firmwareAll versions
netapph615c_firmwareAll versions
netapph700e_firmwareAll versions
netapph700s_firmwareAll versions
redhatenterprise_linux8.0
Published: 2021-03-26