CVE-2020-28588

🗓️ 10 May 2021 18:54:40Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 245 Views🌐 WEB

Information disclosure vulnerability in /proc/pid/syscall of Linux Kernel 5.1 and 5.4. Allows attacker to leak memory contents

Reporter	Title	Published	Views	Family All 96
AstraLinux	Astra Linux – Vulnerability in Linux	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the Linux operating system’s kernel system call implementation (/proc/pid/syscall) allows a perpetrator to gain unauthorized access to protected information.	15 Jun 202100:00	–	bdu_fstec
Circl	CVE-2020-28588	5 May 202104:21	–	circl
CNNVD	Linux kernel security vulnerabilities	11 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-28588	10 May 202118:54	–	cvelist
Debian CVE	CVE-2020-28588	10 May 202118:54	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	31 Mar 202100:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel-container security update	31 Mar 202100:00	–	oraclelinux
EUVD	EUVD-2020-20986	7 Oct 202500:30	–	euvd
Mageia	Updated kernel packages fix security vulnerabilities	15 Jan 202112:31	–	mageia

NVD

Vulners

Node

linux linux_kernelMatch5.4.66

linux linux_kernelMatch5.9.8

linux linux_kernelMatch5.10rc4

[
  {
    "product": "Linux Kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux Kernel v5.10-rc4,Linux Kernel v5.4.66,Linux Kernel v5.9.8"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2020-1211

Parameter	Position	Path	Description	CWE
pid	path	/proc/pid/syscall	Information disclosure via /proc/pid/syscall allowing leakage of kernel memory contents.	CWE-681

17 Jun 2026 03:10Current

5.6Medium risk

Vulners AI Score5.6

CVSS 22.1

CVSS 3.15.5

CVSS 34

EPSS0.011

CWE-681