In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libs | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernelUpgrade kernel-tools | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-gke-4.15Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-1092-awsUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-oracleUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-awsUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04 | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub