The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2016 | Jun 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | Jun 24, 2016 |
| Redhat_linux | — | Upgrade kernel-debuginfo-common-s390xUpgrade kernel-docUpgrade kernel-debug-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-bootwrapperUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-ppc64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-kdump-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-kdumpUpgrade python-perf-debuginfo | Nov 4, 2016 | Jun 27, 2016 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Aug 26, 2016 | Jun 27, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-36-genericUpgrade linux-image-3.13.0-95-powerpc-smpUpgrade linux-image-3.13.0-95-powerpc-e500Upgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-4.4.0-1021-raspi2Upgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-4.4.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-95-genericUpgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-3.13.0-95-generic-lpaeUpgrade linux-image-3.13.0-95-lowlatencyUpgrade linux-image-3.13.0-95-powerpc64-embUpgrade linux-image-3.13.0-95-powerpc-e500mcUpgrade linux-image-3.13.0-95-powerpc64-smp | Aug 29, 2016 | Jun 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub