oss-security - CVE Request: Linux: powerpc/tm: Always reclaim in start

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1466753023.11831.9.camel@ellerman.id.au>
Date: Fri, 24 Jun 2016 17:23:43 +1000
From: Michael Ellerman <mpe@...erman.id.au>
To: oss-security@...ts.openwall.com
Subject: CVE Request: Linux: powerpc/tm: Always reclaim in start_thread()
 for exec() class syscalls

Hi,

We've found an issue in the handling of Transactional Memory on powerpc
systems. An unprivileged local user can crash the kernel by starting a
transaction, suspending it, and then calling any of the exec() class system
calls.

More info:
 https://patchwork.ozlabs.org/patch/636776/
 https://patchwork.ozlabs.org/patch/636774/ (test case)

Could you please allocate a CVE for this?

cheers

Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.