In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headers | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perf | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-obs-build | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-161-genericUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-5.0.0-1015-gcp | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub