CVE-2019-13648

MEDIUM

Linux Kernel < 5.2.1 - Denial of Service via sigreturn() System Call

Title source: llm
STIX 2.1

Description

In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.

References (17)

Core 17
Core References
Patch, Third Party Advisory x_refsource_misc
https://patchwork.ozlabs.org/patch/1133904/
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2019/07/30/1
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190806-0001/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2019/dsa-4495
Mailing List mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Aug/13
Mailing List mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Aug/18
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2019/dsa-4497
Mailing List mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Aug/26
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4114-1/
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4115-1/
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4116-1/

Scores

CVSS v3 5.5
EPSS 0.0059
EPSS Percentile 44.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-399
Status published
Products (1)
linux/linux_kernel < 5.2.1
Published Jul 19, 2019
Tracked Since Feb 18, 2026