CVE-2018-1091 in Kernelinfo

Summary

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/04/2017

Disclosure

03/27/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!