Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-1091 Details

Description

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70	CVE	PatchVendor Advisory
http://openwall.com/lists/oss-security/2018/03/27/4	CVE	Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1318	CVE
https://access.redhat.com/security/cve/cve-2018-1091	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1558149	CVE	Issue TrackingThird Party Advisory
https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70	CVE	PatchThird Party Advisory
https://marc.info/?l=linuxppc-embedded&m=150535531910494&w=2	CVE	PatchThird Party Advisory
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5	CVE	PatchVendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70	[email protected]	PatchVendor Advisory
http://openwall.com/lists/oss-security/2018/03/27/4	[email protected]	Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1318	[email protected]
https://access.redhat.com/security/cve/cve-2018-1091	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1558149	[email protected]	Issue TrackingThird Party Advisory
https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70	[email protected]	PatchThird Party Advisory
https://marc.info/?l=linuxppc-embedded&m=150535531910494&w=2	[email protected]	PatchThird Party Advisory
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5	[email protected]	PatchVendor Advisory

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]
CWE-391	Unchecked Error Condition	[email protected]

Affected Products

Product	Versions
linux linux kernel	<= 4.13.4
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 9, 2019	CVE Modified	[email protected]
May 10, 2018	CVE Modified	[email protected]
Apr 24, 2018	Initial Analysis	[email protected]
Mar 28, 2018	CVE Modified	[email protected]