The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.
CVSS Details
- CVSS 3.1 Base Score: 4.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade kvm-toolsUpgrade kvm | Dec 1, 2016 | Mar 5, 2010 |
| Oracle_linux | — | Upgrade kvmUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kmod-kvm | Oct 16, 2024 | Mar 5, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-22-generic-dbgsymUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-22-powerpc-smp-dbgsymUpgrade linux-image-2.6.32-22-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-22-server-dbgsymUpgrade linux-image-2.6.32-22-powerpc64-smp-dbgsymUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-22-sparc64-smp-dbgsymUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-22-lpiaUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-205-doveUpgrade linux-image-2.6.32-22-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-22-serverUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-22-versatileUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-22-generic-pae-dbgsymUpgrade linux-image-2.6.31-802-st1-5Upgrade linux-image-2.6.32-22-386-dbgsymUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-22-lpia-dbgsymUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-22-virtualUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-22-sparc64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-306-ec2Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-22-powerpcUpgrade linux-image-2.6.32-22-powerpc-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-22-generic-paeUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-22-ia64Upgrade linux-image-2.6.32-22-powerpc-dbgsymUpgrade linux-image-2.6.33-501-omapUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-22-powerpc64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.32-22-ia64-dbgsymUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-22-preempt-dbgsymUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-22-versatile-dbgsymUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-22-preemptUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-22-sparc64-dbgsymUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-22-sparc64-smpUpgrade linux-image-2.6.31-112-imx51 | Nov 8, 2024 | Mar 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub