Audit Subsystem Logging Flaw in Linux Package - CVE-2020-35501
Summary
DEBIAN-CVE-2020-35501: A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing system resources and hardware. It is responsible for handling system calls, process management, and security features. This package is critical for system stability and security, making it a prime target for vulnerabilities that could compromise system integrity.
Vulnerability Detail
A flaw was identified in the Linux kernel's implementation of audit rules, where certain system calls may not be logged correctly by the audit subsystem. This vulnerability, designated as CVE-2020-35501, can lead to a lack of visibility into system activities, potentially allowing malicious actions to go unnoticed. The issue arises from the way audit rules are processed, which may inadvertently skip logging for specific syscalls, undermining the auditing process and exposing the system to security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually monitor system calls and activities using alternative logging mechanisms or tools until the package is updated. However, this is not a comprehensive solution and should only be used as a stopgap measure.
Conclusion
CVE-2020-35501 represents a significant vulnerability in the Linux package that could compromise system security by failing to log certain system calls. It is crucial for users to update their systems to the latest patched version to mitigate this risk. Regular monitoring and using tools like Vulert can help maintain awareness of potential vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2020-35501 is a vulnerability in the Linux kernel that affects the audit subsystem, potentially allowing certain system calls to go unlogged.
This vulnerability can lead to a lack of visibility into system activities, making it easier for malicious actions to occur without detection.
If you are using Debian versions 11, 12, 13, or 14, your system may be affected by this vulnerability. It is recommended to check for updates.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check your application without signup.
If an immediate update is not possible, consider implementing temporary monitoring solutions to track system calls until the package can be updated.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
