Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernelUpgrade python-perfUpgrade kernel-devel | Dec 1, 2016 | Jan 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 22, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 22, 2013 |
| Suse | — | Upgrade kernel-trace-baseUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-pae-extraUpgrade btrfs-kmp-defaultUpgrade kernel-default-baseUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64-baseUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade xen-kmp-paeUpgrade kernel-ec2-develUpgrade kernel-ppc64Upgrade xen-kmp-defaultUpgrade kernel-ppc64-develUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-xen-extraUpgrade kernel-trace-extraUpgrade btrfs-kmp-xenUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade ext4dev-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-ec2Upgrade kernel-symsUpgrade xen-kmp-traceUpgrade kernel-default-manUpgrade kernel-xen-base | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-26-virtualUpgrade linux-image-2.6.32-44-preemptUpgrade linux-image-3.0.0-26-serverUpgrade linux-image-3.0.0-26-powerpc64-smpUpgrade linux-image-2.6.32-44-powerpcUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-2.6.32-44-virtualUpgrade linux-image-2.6.32-44-386Upgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-2.6.32-44-genericUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-3.0.0-1216-omap4Upgrade linux-image-3.0.0-26-generic-paeUpgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-2.6.32-44-versatileUpgrade linux-image-3.0.0-26-omapUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-3.2.0-29-omapUpgrade linux-image-3.0.0-26-powerpcUpgrade linux-image-2.6.32-44-powerpc-smpUpgrade linux-image-3.0.0-26-powerpc-smpUpgrade linux-image-2.6.32-44-generic-paeUpgrade linux-image-2.6.32-44-powerpc64-smpUpgrade linux-image-2.6.32-44-sparc64Upgrade linux-image-2.6.32-44-serverUpgrade linux-image-2.6.32-44-ia64Upgrade linux-image-2.6.32-44-lpiaUpgrade linux-image-3.0.0-26-genericUpgrade linux-image-2.6.32-44-sparc64-smp | Nov 8, 2024 | Jan 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub