The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | Apr 27, 2016 |
| Redhat_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-docUpgrade kernel-toolsUpgrade kernel-kdump-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-traceUpgrade kernel-docUpgrade kernel-rt-trace-develUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-kdumpUpgrade kernel-rt-trace-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-debuginfo | Nov 4, 2016 | Apr 27, 2016 |
| Ubuntu | — | Upgrade linuxUpgrade linux-lts-utopicUpgrade linux-lts-wilyUpgrade linux-lts-trustyUpgrade linux-lts-vividUpgrade linux-raspi2 | Nov 19, 2024 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub