PT-2016-5026 · Linux+3 · Linux Kernel+3
Marcin Kościelnicki
·
Publicado
2016-04-12
·
Atualizado
2024-03-14
·
CVE-2016-2143
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.5 on s390 platforms
Description
The fork implementation in the Linux kernel mishandles the case of four page-table levels, allowing local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application. This issue is related to arch/s390/include/asm/mmu context.h and arch/s390/include/asm/pgalloc.h.
Recommendations
For Linux kernel versions prior to 4.5 on s390 platforms, update to version 4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted applications that could exploit this issue until a patch is available.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Linux Kernel
Red Hat
Suse