The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Apr 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 1, 2014 |
| Ubuntu | — | Upgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.11.0-22-generic-lpae | Nov 8, 2024 | Apr 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub