The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kmod-kvmUpgrade kvm | Dec 1, 2016 | Oct 30, 2009 |
| Oracle_linux | — | Upgrade kvmUpgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade kvm-tools | Oct 16, 2024 | Oct 30, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-16-sparc64 | Nov 8, 2024 | Oct 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub