In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perf | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libs | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perf | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-devel-azure | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-gkeUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-genericUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04 | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub