CVE-2020-35508: Linux Kernel

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

Affected products

• Linux Linux Kernel: before 5.12 (fixed in 5.12); version 5.12 only
• Netapp a700s Firmware: affected versions not specified
• Netapp Aff a400 Firmware: affected versions not specified
• Netapp Brocade Fabric Operating System Firmware: affected versions not specified
• Netapp FAS8300 Firmware: affected versions not specified
• Netapp FAS8700 Firmware: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Red Hat Enterprise Linux: version 8.0 only

Published 2021-03-26. Last modified 2026-06-17.