CVE-2020-28012: Missing close-on-exec flag for privileged pipe