[X/B/D/E][SRU][PATCH 0/1] Fix for CVE-2019-13648

Po-Hsu Lin po-hsu.lin at canonical.com
Fri Jul 26 08:57:54 UTC 2019


In the Linux kernel through 5.2.1 on the powerpc platform, when hardware
transactional memory is disabled, a local user can cause a denial of
service (TM Bad Thing exception and system crash) via a sigreturn()
system call that sends a crafted signal frame.

This patch can be cherry-picked into all the affected kernels,
X, B, D and E. I'm sending two patches seperately as the one for B/D/E
cannot be applied to X.

https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-13648.html

Michael Neuling (1):
  powerpc/tm: Fix oops on sigreturn on systems without TM

 arch/powerpc/kernel/signal_32.c | 3 +++
 arch/powerpc/kernel/signal_64.c | 5 +++++
 2 files changed, 8 insertions(+)

-- 
2.7.4




More information about the kernel-team mailing list