In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Apr 1, 2020 | Jul 19, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perf | Dec 4, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-tools | Nov 19, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Sep 12, 2019 | Jul 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel | Mar 24, 2020 | Jul 19, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 19, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Apr 1, 2020 | Jul 19, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-default | Aug 7, 2019 | Jul 19, 2019 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-5.0.0-27-genericUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1092-awsUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-4.15.0-60-generic | Sep 3, 2019 | Jul 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub