CVE-2014-2039: Input Validation

Q: Which systems are exposed to this issue?

Only Linux kernels built for the s390 architecture (CONFIG_S390) are affected, and the issue applies to kernels before 3.13.5. Systems using other architectures are not indicated as affected by the available information.

Q: What does an attacker need to exploit it?

An attacker needs local access sufficient to run an unprivileged application or process on the affected s390 system. Exploitation involves executing a crafted linkage-stack instruction.

Q: What is the impact of successful exploitation?

Successful exploitation can trigger a low-address protection exception and crash the system, causing a denial of service. The available information does not indicate confidentiality or integrity impact.

Q: What should be done if an affected system cannot be updated immediately?

The provided information identifies exploitation through execution of a crafted instruction by a local user or application, but it does not provide a specific workaround. Restricting untrusted local access can reduce exposure until the kernel is updated.

Published Feb 20, 2014

Updated

arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.

Other sources

Linux kernel built for the s390 architecture(CONFIGS390) is vulnerable to a crash due to low-address protection exception. It occurs when an application uses a linkage stack instruction.

An unprivileged user/application could use this flaw to crash the system resulting in DoS.

Upstream fix: ------------- -> https://git.kernel.org/linus/8d7f6690cedb83456edd41c9bd583783f0703bf0

— Red Hat

Affected Software

3 affected componentsFixes available

Linux Linux kernel<3.13.5

ubuntu/linux*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.3-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Upgrade
Upgrade Linux kernel (s390) to a version that resolves this vulnerability.
Fixed in 3.13.5

Event History

Feb 20, 2014

Data Sourced

via Red Hat·04:13 PM

DescriptionSeverityAffected Software

Feb 28, 2014

CVE Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via OSV·06:18 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·06:18 AM

RemedyDescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-2906

Frequently Asked Questions

Which systems are exposed to this issue?

Only Linux kernels built for the s390 architecture (CONFIG_S390) are affected, and the issue applies to kernels before 3.13.5. Systems using other architectures are not indicated as affected by the available information.

What does an attacker need to exploit it?

An attacker needs local access sufficient to run an unprivileged application or process on the affected s390 system. Exploitation involves executing a crafted linkage-stack instruction.

What is the impact of successful exploitation?

Successful exploitation can trigger a low-address protection exception and crash the system, causing a denial of service. The available information does not indicate confidentiality or integrity impact.

What should be done if an affected system cannot be updated immediately?

The provided information identifies exploitation through execution of a crafted instruction by a local user or application, but it does not provide a specific workaround. Restricting untrusted local access can reduce exposure until the kernel is updated.

CVE-2014-2039: Input Validation

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

What should be done if an affected system cannot be updated immediately?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

What should be done if an affected system cannot be updated immediately?