The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade perf | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 10, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-3.2.0-75-powerpc-smpUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.2.0-75-virtualUpgrade linux-image-3.2.0-75-powerpc64-smpUpgrade linux-image-3.2.0-75-highbankUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.2.0-1458-omap4Upgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.2.0-75-generic-paeUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.2.0-75-omapUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-75-genericUpgrade linux-image-3.13.0-43-powerpc-e500 | Nov 8, 2024 | Nov 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub