CVE-2014-2673

MEDIUM

Description

The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=621b5060e823301d0cba4cb52a7ee3491922d291

http://secunia.com/advisories/57436

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7

http://www.openwall.com/lists/oss-security/2014/03/30/5

http://www.securityfocus.com/bid/66477

https://exchange.xforce.ibmcloud.com/vulnerabilities/92113

https://github.com/torvalds/linux/commit/621b5060e823301d0cba4cb52a7ee3491922d291

https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.15

Details

Source: MITRE

Published: 2014-04-01

Updated: 2020-08-27

Type: CWE-20

Risk Information

CVSS v2.0

Base Score: 4.7

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 3.4

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Tenable Plugins

View all (8 total)

IDNameProductFamilySeverity
124970EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1517)NessusHuawei Local Security Checks
high
124803EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1479)NessusHuawei Local Security Checks
critical
81800Oracle Linux 7 : kernel (ELSA-2015-0290)NessusOracle Linux Local Security Checks
high
77046RHEL 7 : kernel (RHSA-2014:1023)NessusRed Hat Local Security Checks
high
77045Oracle Linux 7 : kernel (ELSA-2014-1023)NessusOracle Linux Local Security Checks
high
77034CentOS 7 : kernel (CESA-2014:1023)NessusCentOS Local Security Checks
high
74215Ubuntu 13.10 : linux vulnerabilities (USN-2228-1)NessusUbuntu Local Security Checks
critical
74213Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2225-1)NessusUbuntu Local Security Checks
critical