CVE-2016-2143 : The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels,

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.

Published 2016-04-27 17:59:09

Updated 2024-03-14 19:59:20

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2016-2143

Probability of exploitation activity in the next 30 days: 0.23%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 61 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2016-2143

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-2143

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2143

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

[security-announce] SUSE-SU-2016:1764-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

[security-announce] SUSE-SU-2016:2074-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2766.html

RHSA-2016:2766 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

[security-announce] SUSE-SU-2016:1672-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

[security-announce] SUSE-SU-2016:1690-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-1539.html

RHSA-2016:1539 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html

[security-announce] SUSE-SU-2016:1707-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html

[security-announce] SUSE-SU-2016:1019-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3607

Debian -- Security Information -- DSA-3607-1 linux
Third Party Advisory

CVEs referencing this url
https://security-tracker.debian.org/tracker/CVE-2016-2143

CVE-2016-2143
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Oracle Linux Bulletin - July 2016
Third Party Advisory

CVEs referencing this url
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d06611327006b059b8bab1

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
https://github.com/torvalds/linux/commit/3446c13b268af86391d06611327006b059b8bab1

s390/mm: four page table levels vs. fork · torvalds/linux@3446c13 · GitHub
Patch

Products affected by CVE-2016-2143

Debian » Debian Linux » Version: 6.0
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.3 and before (<) 3.12.58
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.17 and before (<) 4.1.21
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.13 and before (<) 3.16.35
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.2 and before (<) 4.4.6
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 2.6.25 and before (<) 3.2.79
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Oracle » Linux » Version: 7 Update
cpe:2.3:o:oracle:linux:7:0:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2016-2143

Exploit prediction scoring system (EPSS) score for CVE-2016-2143

CVSS scores for CVE-2016-2143

CWE ids for CVE-2016-2143

References for CVE-2016-2143

Products affected by CVE-2016-2143