The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel | Aug 6, 2016 | Apr 27, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Aug 2, 2016 | Jun 1, 2016 |
| Redhat_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-firmwareUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-kdump-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdump-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-kdumpUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade python-perf-debuginfoUpgrade kernel-docUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade kernel-debuginfo-common-i686Upgrade perf-debuginfoUpgrade kernel-bootwrapper | Aug 2, 2016 | Apr 27, 2016 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade gfs2-kmp-default | Apr 12, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub