The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.
CVSS Details
- CVSS 3.1 Base Score: 4.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kmod-kvmUpgrade kvm | Dec 1, 2016 | Mar 5, 2010 |
| Oracle_linux | — | Upgrade kvmUpgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade kvm-tools | Oct 16, 2024 | Mar 5, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-22-sparc64-dbgsymUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-22-powerpc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-22-sparc64Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-22-powerpc-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-306-ec2Upgrade linux-image-2.6.32-22-powerpc-dbgsymUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-22-preemptUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.33-501-omapUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-22-versatile-dbgsymUpgrade linux-image-2.6.32-22-generic-paeUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-22-sparc64-smpUpgrade linux-image-2.6.32-22-ia64-dbgsymUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-22-powerpcUpgrade linux-image-2.6.32-22-preempt-dbgsymUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-22-ia64Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-22-generic-dbgsymUpgrade linux-image-2.6.32-22-server-dbgsymUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-22-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-22-powerpc-smp-dbgsymUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-22-lpia-dbgsymUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-22-386Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-22-sparc64-smp-dbgsymUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-22-powerpc64-smp-dbgsymUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-22-lpiaUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-22-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-22-386-dbgsymUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-205-doveUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-22-generic-pae-dbgsymUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-22-versatileUpgrade linux-image-2.6.31-802-st1-5Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-22-server | Nov 8, 2024 | Mar 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub