Published: 19/07/2019 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

In the Linux kernel up to and including 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 77 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Comm ...

Several security issues were fixed in the Linux kernel ...

USN 4115-1 introduced a regression in the Linux kernel ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-8553 Jan Beulich discovered that CVE-2015-2150 was not completely addressed If a PCI physical function is passed through to a Xen guest, the guest is able to access its memory and I ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2018-20836 chenxiang reported a race condition in libsas, the kernel subsystem supporting Serial Attached SCSI (SAS) devices, which could lead to a use-after-free It is not clear how thi ...

Impact: Moderate Public Date: 2019-07-19 CWE: CWE-400 Bugzilla: 1735630: CVE-2019-13648 kernel: denial ...

CWE-399 https://patchwork.ozlabs.org/patch/1133904/http://www.openwall.com/lists/oss-security/2019/07/30/1 https://git.kernel.org/torvalds/c/f16d80b75a096c52354c6e0a574993f3b0dfbdfe https://security.netapp.com/advisory/ntap-20190806-0001/https://www.debian.org/security/2019/dsa-4495 https://seclists.org/bugtraq/2019/Aug/13 https://www.debian.org/security/2019/dsa-4497 https://seclists.org/bugtraq/2019/Aug/18 https://seclists.org/bugtraq/2019/Aug/26 https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html https://usn.ubuntu.com/4114-1/https://usn.ubuntu.com/4116-1/https://usn.ubuntu.com/4115-1/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRK2MW223KQZ76DKEF2BZFN6TCXLZLDS/https://access.redhat.com/errata/RHSA-2020:3019 https://nvd.nist.gov https://usn.ubuntu.com/4116-1/

CVE-2019-13648

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect