CVE-2018-1091: falha em Linux kernel v4.13 and newer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.4%
In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.
Produtos afetados
n/a · Linux kernel v4.13 and newerReferências
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70http://openwall.com/lists/oss-security/2018/03/27/4https://access.redhat.com/errata/RHSA-2018:1318https://access.redhat.com/security/cve/cve-2018-1091https://bugzilla.redhat.com/show_bug.cgi?id=1558149https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70https://marc.info/?l=linuxppc-embedded&m=150535531910494&w=2https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5