{ "schema_version": "1.4.0", "id": "GHSA-h8j9-2jj6-73jj", "modified": "2022-05-14T03:57:50Z", "published": "2022-05-14T03:57:50Z", "aliases": [ "CVE-2016-2143" ], "details": "The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2143" }, { "type": "WEB", "url": "https://github.com/torvalds/linux/commit/3446c13b268af86391d06611327006b059b8bab1" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2016:1539" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2016:2766" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2016-2143" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1308908" }, { "type": "WEB", "url": "https://security-tracker.debian.org/tracker/CVE-2016-2143" }, { "type": "WEB", "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d06611327006b059b8bab1" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2016-1539.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2016-2766.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3607" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html" } ], "database_specific": { "cwe_ids": [ "CWE-20" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2016-04-27T17:59:00Z" } }