Published: 27/04/2016 Updated: 14/03/2024

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

The fork implementation in the Linux kernel prior to 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
debian debian linux 7.0
debian debian linux 6.0
redhat enterprise linux 7.0
oracle linux 7

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

It was reported that on s390x, the fork of a process with four page table levels will cause memory corruption with a variety of symptoms All processes are created with three level page table and a limit of 4TB for the address space If the parent process has four page table levels with a limit of 8PB, the function that duplicates the address space ...

CWE-20 https://github.com/torvalds/linux/commit/3446c13b268af86391d06611327006b059b8bab1 https://security-tracker.debian.org/tracker/CVE-2016-2143 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d06611327006b059b8bab1 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://rhn.redhat.com/errata/RHSA-2016-1539.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.debian.org/security/2016/dsa-3607 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html http://rhn.redhat.com/errata/RHSA-2016-2766.html https://access.redhat.com/errata/RHSA-2016:2766 https://nvd.nist.gov https://www.debian.org/security/./dsa-3607

CVE-2016-2143

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect