CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: in the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a power host due to a missing processor feature check and an erroneous use of transactional memory (tm) instructions in the core dump path, leading to a denial of service.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2018-03-27
Last Modified Date: 2018-05-10