Vulnerability Spotlight: Information disclosure vulnerability in the Linux Kernel

Summary: Cisco Talos discovered an information disclosure vulnerability, TALOS-2020-1211 (CVE-2020-28588), in the /proc/pid/syscall functionality of 32-bit ARM devices running Linux, first found on an Azure Sphere device (version 20.10). An attacker could read /proc/<pid>/syscall, a legitimate Linux operating system file, to view kernel stack memory, and Talos confirmed Linux Kernel versions 5.10-rc4, 5.4.66 and 5.9.8 could be exploited.
What you should know: The leak is read through a legitimate OS file, so it cannot be detected on a network remotely, and an attacker could use it to exploit additional unpatched Linux vulnerabilities.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-28588
Related: Vulnerability Spotlight: Use-after-free vulnerability in Foxit PDF Reader Cyber Risks ·
Threat Source Newsletter (May 6, 2021) Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026