The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel | Dec 1, 2016 | Jan 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 22, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 6, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 22, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-docsUpgrade xen-kmp-defaultUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-ppc64-baseUpgrade kernel-ec2-baseUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade kernel-ec2-develUpgrade kernel-trace-extraUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-pae-extraUpgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-ppc64-develUpgrade kernel-default | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-30-powerpc64-smpUpgrade linux-image-3.2.0-36-highbankUpgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.0.0-30-omapUpgrade linux-image-3.0.0-30-powerpc-smpUpgrade linux-image-3.2.0-36-powerpc64-smpUpgrade linux-image-3.2.0-36-generic-paeUpgrade linux-image-3.2.0-36-omapUpgrade linux-image-3.0.0-30-genericUpgrade linux-image-3.5.0-22-omapUpgrade linux-image-3.0.0-30-serverUpgrade linux-image-3.5.0-22-highbankUpgrade linux-image-3.2.0-36-genericUpgrade linux-image-3.5.0-22-powerpc-smpUpgrade linux-image-3.2.0-36-powerpc-smpUpgrade linux-image-3.0.0-30-generic-paeUpgrade linux-image-3.0.0-30-powerpcUpgrade linux-image-3.5.0-22-powerpc64-smpUpgrade linux-image-3.0.0-30-virtualUpgrade linux-image-3.2.0-36-virtual | Nov 8, 2024 | Jan 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub