PT-2018-10176 · Linux+4 · Linux Kernel+4

Adam Mariš · Publicado 2017-10-05 · Atualizado 2019-05-17 · CVE-2018-1091

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.5

Description The issue is related to a missing processor feature check and an erroneous use of transactional memory instructions in the core dump path. This can lead to a denial of service when a guest kernel crash is triggered from unprivileged userspace during a core dump on a POWER host.

Recommendations For Linux kernel versions prior to 4.13.5, update to version 4.13.5 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-391

Identificadores relacionados

ALT-PU-2017-2378

ALT-PU-2018-1991

CESA-2018_1318

CVE-2018-1091

OPENSUSE-SU-2018_0972-1

RHSA-2018:1318

RHSA-2018_1318

SUSE-SU-2018:1048-1

SUSE-SU-2018:1217-1

SUSE-SU-2019:1287-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Referências · 175

• https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70 · Correção
• https://bugzilla.suse.com/1064206 · Nota
• https://bugzilla.suse.com/1131416 · Nota
• https://bugzilla.suse.com/812592 · Nota
• https://bugzilla.suse.com/1088087 · Nota
• https://bugzilla.suse.com/1088241 · Nota
• https://suse.com/security/cve/CVE-2018-12127 · Nota
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70 · Aviso do Fabricante
• https://bugzilla.suse.com/1087845 · Nota
• https://suse.com/security/cve/CVE-2017-17741 · Nota
• https://bugzilla.suse.com/1100152 · Nota
• https://bugzilla.suse.com/1073311 · Nota
• https://bugzilla.suse.com/1088324 · Nota
• https://bugzilla.suse.com/1084610 · Nota
• https://bugzilla.suse.com/1088684 · Nota