In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libs | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-source-azure | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-genericUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-azureUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-161-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04 | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub