The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
| Link | Tags |
|---|---|
| http://secunia.com/advisories/57436 | third party advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/92113 | third party advisory vdb entry |
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=621b5060e823301d0cba4cb52a7ee3491922d291 | |
| http://www.securityfocus.com/bid/66477 | third party advisory vdb entry |
| http://www.openwall.com/lists/oss-security/2014/03/30/5 | patch mailing list third party advisory |
| https://github.com/torvalds/linux/commit/621b5060e823301d0cba4cb52a7ee3491922d291 | third party advisory patch |
| https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.15 | release notes vendor advisory |
| http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7 | release notes vendor advisory |