Denial of Service Vulnerability in Linux Kernel's flush_tmregs_to_thread Function

CVE-2018-1091 · MEDIUM Severity

AV:L/AC:L/AU:N/C:N/I:N/A:C

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.