The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 26, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 19, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-server | Nov 8, 2024 | Nov 26, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub