The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-toolsUpgrade kvmUpgrade kvm-qemu-imgUpgrade kmod-kvm | Dec 1, 2016 | Sep 22, 2009 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvm | Oct 16, 2024 | Sep 22, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-mckinley-smp | Nov 8, 2024 | Sep 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub