vulnerability

Oracle Linux: CVE-2016-5412: ELSA-2016-2574: kernel security, bug fix, and enhancement update (IMPORTANT)

Severity
4
CVSS
(AV:A/AC:H/Au:M/C:N/I:N/A:C)
Published
2016-07-28
Added
2016-11-09
Modified
2024-11-29

Description

arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

Solution

oracle-linux-upgrade-kernel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.