In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perf | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headers | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade perf | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-ec2 | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-azureUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-161-genericUpgrade linux-image-oracle | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub