Beveiligingsadvies

CVE-2018-1091

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-03-27 21:00:00
Laatst bijgewerkt 2024-08-05 03:51:48
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.