The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | Apr 27, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-docUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-kdump-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-rt-trace-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-traceUpgrade kernel-abi-whitelistsUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-devel | Nov 4, 2016 | Apr 27, 2016 |
| Ubuntu | — | Upgrade linuxUpgrade linux-lts-wilyUpgrade linux-lts-utopicUpgrade linux-lts-trustyUpgrade linux-raspi2Upgrade linux-lts-vivid | Nov 19, 2024 | Apr 27, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub