VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel. 

Advisory: CVE-2018-1091
  Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-1091
  CVSS severity score: 4.9/10.0
  Description:

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.



This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.