Description
arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.7.2-1 | — |
| Debian 13 | linux | 4.7.2-1 | — |
| Debian 12 | linux | 4.7.2-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux | 4.4.0-38.57 | USN-3084-1 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1023.29 | USN-3084-3 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1026.29 | USN-3084-4 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-38.57~14.04.1 | USN-3084-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | perf +18 | 3.10.0-514.el7 | RHSA-2016:2574 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | perf +11 | 3.10.0-514.el7 | ELSA-2016-2574 |
Advisories 6
- RHSA-2016:2574 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3084-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-3084-2 linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3084-3 linux-raspi2 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3084-4 linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- ELSA-2016-2574 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 9, 2016
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1349916
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245
- [oss-security] 20160728 CVE-2016-5412 Kernel: powerpc: kvm: Infinite loop via H_CEDE hypercall when running under hypervisor-mode mailing-list
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93d17397e4e2182fdaad503e2f9da46202c0f1c3
- RHSA-2016:2574 vendor-advisory
- https://github.com/torvalds/linux/commit/93d17397e4e2182fdaad503e2f9da46202c0f1c3
- https://github.com/torvalds/linux/commit/f024ee098476a3e620232e4a78cfac505f121245