The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2016 | Jun 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | Jun 24, 2016 |
| Redhat_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-ppc64Upgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-kdump-debuginfoUpgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-kdump-develUpgrade kernel-develUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfo | Nov 4, 2016 | Jun 27, 2016 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docs | Aug 26, 2016 | Jun 27, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-4.4.0-36-genericUpgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-3.13.0-95-powerpc-e500Upgrade linux-image-4.4.0-1021-raspi2Upgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-3.13.0-95-powerpc-smpUpgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-3.13.0-95-lowlatencyUpgrade linux-image-3.13.0-95-powerpc-e500mcUpgrade linux-image-3.13.0-95-powerpc64-smpUpgrade linux-image-3.13.0-95-generic-lpaeUpgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-4.4.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-95-powerpc64-embUpgrade linux-image-3.13.0-95-generic | Aug 29, 2016 | Jun 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub