The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Jan 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 22, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 6, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 22, 2013 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-pae-baseUpgrade kernel-xen-extraUpgrade kernel-ec2-baseUpgrade kernel-default-extraUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ec2-develUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-ppc64-baseUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-trace-extraUpgrade xen-kmp-defaultUpgrade kernel-default-manUpgrade xen-kmp-traceUpgrade kernel-paeUpgrade xen-kmp-paeUpgrade kernel-pae-develUpgrade kernel-ec2Upgrade kernel-ppc64-develUpgrade kernel-pae-extraUpgrade kernel-default | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-30-powerpc64-smpUpgrade linux-image-3.2.0-36-omapUpgrade linux-image-3.0.0-30-powerpc-smpUpgrade linux-image-3.2.0-36-generic-paeUpgrade linux-image-3.2.0-36-powerpc64-smpUpgrade linux-image-3.0.0-30-omapUpgrade linux-image-3.0.0-30-genericUpgrade linux-image-3.2.0-36-highbankUpgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.0.0-30-powerpcUpgrade linux-image-3.2.0-36-genericUpgrade linux-image-3.5.0-22-powerpc64-smpUpgrade linux-image-3.0.0-30-serverUpgrade linux-image-3.2.0-36-powerpc-smpUpgrade linux-image-3.5.0-22-omapUpgrade linux-image-3.5.0-22-highbankUpgrade linux-image-3.0.0-30-virtualUpgrade linux-image-3.0.0-30-generic-paeUpgrade linux-image-3.5.0-22-powerpc-smpUpgrade linux-image-3.2.0-36-virtual | Nov 8, 2024 | Jan 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub