CVE-2016-5828

 

Published at: - 27-06-2016 12:59

Last modified: - 17-01-2023 10:16

Total changes: - 4

Description

The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://patchwork.ozlabs.org/patch/636776/
• [oss-security] 20160625 Re: CVE Request: Linux: powerpc/tm: Always reclaim in start_thread() for exec() class syscalls - Linux kernel-Mailing List, Release Notes, Third Party Advisory
• DSA-3616-Third Party Advisory
• SUSE-SU-2016:1937-Mailing List, Third Party Advisory
• openSUSE-SU-2016:2184-Mailing List, Third Party Advisory
• USN-3071-1-Third Party Advisory
• 91415-Third Party Advisory, VDB Entry
• USN-3070-3-Third Party Advisory
• USN-3070-4-Third Party Advisory
• USN-3070-2-Third Party Advisory
• USN-3070-1-Third Party Advisory
• SUSE-SU-2016:2105-Mailing List, Third Party Advisory
• USN-3071-2-Third Party Advisory
• RHSA-2016:2574-Third Party Advisory

 

Keywords

NVD

 

CVE-2016-5828

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures