The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmod-kvmUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-develUpgrade kvm-qemu-imgUpgrade perfUpgrade python-perfUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kvmUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 5, 2022 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade ofed-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade kernel-xen-base-debuginfoUpgrade sle-hae-releaseUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade xen-kmp-paeUpgrade kernel-pae-develUpgrade gfs2-kmp-ppc64Upgrade kernel-source-rtUpgrade ext4dev-kmp-paeUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-default-base-debuginfoUpgrade kernel-debug-debugsourceUpgrade kernel-desktop-base-debuginfoUpgrade kernel-syms-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ext4dev-kmp-xenUpgrade ocfs2-kmp-rt_traceUpgrade lttng-modules-kmp-rtUpgrade hyper-v-kmp-traceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-default-develUpgrade hyper-v-kmp-paeUpgrade kernel-trace-debugsourceUpgrade kernel-pae-debugsourceUpgrade kernel-trace-develUpgrade btrfs-kmp-paeUpgrade kernel-pae-debuginfoUpgrade kernel-ec2Upgrade kernel-debug-devel-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade ocfs2-kmp-paeUpgrade ocfs2-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade kernel-pae-base-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade cluster-network-kmp-traceUpgrade kernel-desktop-develUpgrade kernel-xenUpgrade ocfs2-kmp-ppc64Upgrade kernel-desktop-debuginfoUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-desktop-baseUpgrade kernel-rt_traceUpgrade kernel-traceUpgrade kernel-paeUpgrade xen-kmp-traceUpgrade kernel-default-manUpgrade ext4dev-kmp-traceUpgrade kernel-ec2-debuginfoUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-pae-baseUpgrade kernel-ec2-extraUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-debuginfoUpgrade kernel-ec2-base-debuginfoUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade xen-kmp-defaultUpgrade kernel-develUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-defaultUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-debugsourceUpgrade kernel-trace-extraUpgrade kernel-desktop-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-vanilla-baseUpgrade cluster-network-kmp-xenUpgrade kernel-rt_trace-develUpgrade kernel-ec2-debugsourceUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-traceUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-traceUpgrade kernel-pae-extraUpgrade kernel-ppc64-develUpgrade gfs2-kmp-xenUpgrade kernel-debug-baseUpgrade kernel-ppc64-baseUpgrade kernel-trace-debuginfoUpgrade kernel-rt-develUpgrade kernel-xen-debuginfoUpgrade ofed-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-rt_trace-baseUpgrade kernel-debugUpgrade kernel-xen-devel-debuginfoUpgrade btrfs-kmp-defaultUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-default-debugsourceUpgrade kernel-xen-extraUpgrade btrfs-kmp-xenUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-xen-develUpgrade drbd-kmp-rt_traceUpgrade kernel-ppc64Upgrade kernel-pae-devel-debuginfo | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.2.0-41-omap | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub