The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel | Aug 6, 2016 | Apr 27, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Aug 2, 2016 | Jun 1, 2016 |
| Redhat_linux | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-kdump-develUpgrade kernel-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-tools-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-firmwareUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-kdumpUpgrade kernel-abi-whitelistsUpgrade python-perf-debuginfoUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-debuginfo-common-i686Upgrade perfUpgrade kernelUpgrade kernel-tools | Aug 2, 2016 | Apr 27, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Apr 12, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub