The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
21 Nov 2024, 02:55
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html - Mailing List, Third Party Advisory | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - Mailing List, Third Party Advisory | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - Mailing List, Third Party Advisory | |
References | () http://rhn.redhat.com/errata/RHSA-2016-2574.html - Third Party Advisory | |
References | () http://www.debian.org/security/2016/dsa-3616 - Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2016/06/25/7 - Mailing List, Release Notes, Third Party Advisory | |
References | () http://www.securityfocus.com/bid/91415 - Third Party Advisory, VDB Entry | |
References | () http://www.ubuntu.com/usn/USN-3070-1 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-3070-2 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-3070-3 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-3070-4 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-3071-1 - Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-3071-2 - Third Party Advisory | |
References | () https://patchwork.ozlabs.org/patch/636776/ - Patch, Third Party Advisory |
Information
Published : 2016-06-27 10:59
Updated : 2024-11-21 02:55
NVD link : CVE-2016-5828
Mitre link : CVE-2016-5828
CVE.ORG link : CVE-2016-5828
JSON object : View
Products Affected
novell
- suse_linux_enterprise_real_time_extension
linux
- linux_kernel
debian
- debian_linux
canonical
- ubuntu_linux
CWE
CWE-20
Improper Input Validation