CVE-2019-13648

Published: 19 July 2019

In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.

From the Ubuntu Security Team

Praveen Pandey discovered that the Linux kernel did not properly validate sent signals in some situations on PowerPC systems with transactional memory disabled. A local attacker could use this to cause a denial of service.

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-60.67)
	disco	Released (5.0.0-27.28)
	eoan	Not vulnerable (5.2.0-10.11)
	precise	Ignored (was needs-triage ESM criteria)
	trusty	Ignored (was needs-triage ESM criteria)
	upstream	Released (5.3~rc2)
	xenial	Released (4.4.0-161.189)
	Patches: Introduced by 2b0a576d15e0e14751f00f9c87e46bad27f217e7 Fixed by f16d80b75a096c52354c6e0a574993f3b0dfbdfe
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Ignored (was needs-triage ESM criteria)
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (5.0.0-1021.24~18.04.1)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-aws-hwe Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-azure Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Ignored (was needs-triage ESM criteria)
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-azure-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (5.3.0-1007.8~18.04.1)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-euclid Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-flo Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-gcp Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-gcp-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (5.3.0-1008.9~18.04.1)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-gcp-edge Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-gke Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-gke-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-gke-5.0 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-goldfish Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-grouper Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-hwe Launchpad, Ubuntu, Debian	bionic	Released (5.0.0-27.28~18.04.1)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Released (4.15.0-60.67~16.04.1)
linux-hwe-edge Launchpad, Ubuntu, Debian	bionic	Ignored (was pending \[5.3.0-19.20~18.04.2\] now end-of-life)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Released (4.15.0-60.67~16.04.1)
linux-kvm Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-lts-trusty Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Ignored (was needs-triage ESM criteria)
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-lts-utopic Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-lts-vivid Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-lts-wily Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-lts-xenial Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Ignored (was needs-triage ESM criteria)
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-maguro Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-mako Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-manta Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-oem Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-oem-5.4 Launchpad, Ubuntu, Debian	bionic	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-oem-osp1 Launchpad, Ubuntu, Debian	bionic	Released (5.0.0-1020.22)
	disco	Ignored (was pending \[5.0.0-1022.24\] now end-of-life)
	eoan	Released (5.0.0-1022.24)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-oracle Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-oracle-5.0 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (5.0.0-1007.12~18.04.1)
	disco	Does not exist
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Not vulnerable (powerpc only)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)
linux-raspi2-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (5.3.0-1017.19~18.04.1)
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Does not exist
linux-snapdragon Launchpad, Ubuntu, Debian	bionic	Not vulnerable (powerpc only)
	disco	Not vulnerable (powerpc only)
	eoan	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (5.3~rc2)
	xenial	Not vulnerable (powerpc only)

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›