The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-docUpgrade perf | Aug 6, 2016 | Apr 27, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Aug 2, 2016 | Jun 1, 2016 |
| Redhat_linux | — | Upgrade kernel-debuginfo-common-i686Upgrade kernelUpgrade kernel-docUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-bootwrapperUpgrade kernel-toolsUpgrade kernel-kdumpUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade perf-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-kdump-develUpgrade kernel-kdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-firmwareUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-ppc64Upgrade kernel-debuginfoUpgrade kernel-devel | Aug 2, 2016 | Apr 27, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Apr 12, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub