Vulnerability Details : CVE-2015-8844
The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2015-8844
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-8844
0.10%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 42 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-8844
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.7
|
MEDIUM | AV:L/AC:M/Au:N/C:N/I:N/A:C |
3.4
|
6.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2015-8844
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-8844
-
https://github.com/torvalds/linux/commit/d2b9d2a5ad5ef04ff978c9923d19730cb05efd55
powerpc/tm: Block signal return setting invalid MSR state · torvalds/linux@d2b9d2a · GitHub
-
http://rhn.redhat.com/errata/RHSA-2016-2574.html
RHSA-2016:2574 - Security Advisory - Red Hat Customer Portal
-
http://www.securitytracker.com/id/1035594
Linux Kernel powerpc Bugs Lets Local Users Cause Denial of Service Conditions on the Target System - SecurityTracker
-
https://bugzilla.redhat.com/show_bug.cgi?id=1326540
1326540 – (CVE-2015-8844, CVE-2015-8845) CVE-2015-8845 CVE-2015-8844 kernel: incorrect restoration of machine specific registers from userspace
-
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5
-
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55
kernel/git/torvalds/linux.git - Linux kernel source treeVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-2584.html
RHSA-2016:2584 - Security Advisory - Red Hat Customer Portal
-
http://www.openwall.com/lists/oss-security/2016/04/13/1
oss-security - CVE Request: Linux kernel: incorrect restoration of machine specific registers from signal handler.
Jump to