4.7

CVE-2014-2673

The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.13.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.317
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7
Vendor Advisory
Release Notes
http://www.openwall.com/lists/oss-security/2014/03/30/5
Patch
Third Party Advisory
Mailing List
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.15
Vendor Advisory
Release Notes
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=621b5060e823301d0cba4cb52a7ee3491922d291
http://secunia.com/advisories/57436
Third Party Advisory
http://www.securityfocus.com/bid/66477
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/92113
Third Party Advisory
VDB Entry
https://github.com/torvalds/linux/commit/621b5060e823301d0cba4cb52a7ee3491922d291
Patch
Third Party Advisory