cbcvebase.
CVE-2015-8845
published 2016-04-27

CVE-2015-8845: The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode…

medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 4.4.2-1 (bookworm)linux 4.4.2-1 (bookworm)
linuxlinux_kernel<= 4.4
linuxlinux_kernel>= 0 < 4.4.2-14.4.2-1
linuxlinux_kernel>= 0 < 4.4.2-14.4.2-1
linuxlinux_kernel>= 0 < 4.4.2-14.4.2-1
linuxlinux_kernel>= 0 < 4.4.2-14.4.2-1
novellsuse_linux_enterprise_desktop
novellsuse_linux_enterprise_server
susesuse_linux_enterprise_live_patching
susesuse_linux_enterprise_module_for_public_cloud
susesuse_linux_enterprise_real_time_extension
susesuse_linux_enterprise_software_development_kit
susesuse_linux_enterprise_workstation_extension

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM