CVE-2016-5828

Published: 27 June 2016

The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.

From the Ubuntu security team

Cyril Bur discovered that on PowerPC platforms, the Linux kernel mishandled transactional memory state on exec(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Priority

Medium

CVSS 3 base score: 7.8

Status

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5828
• https://patchwork.ozlabs.org/patch/636776/
• https://ubuntu.com/security/notices/USN-3070-1
• https://ubuntu.com/security/notices/USN-3071-2
• https://ubuntu.com/security/notices/USN-3071-1
• https://ubuntu.com/security/notices/USN-3070-4
• https://ubuntu.com/security/notices/USN-3070-3
• https://ubuntu.com/security/notices/USN-3070-2
• NVD
• Launchpad
• Debian

Bugs