The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvm | Dec 1, 2016 | Sep 22, 2009 |
| Oracle_linux | — | Upgrade kvmUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kmod-kvm | Oct 16, 2024 | Sep 22, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-sparc64 | Nov 8, 2024 | Sep 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub