The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade perfUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade kernel-develUpgrade kernelUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade python-perfUpgrade kvmUpgrade kernel-headers | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade kernel-xen-base-debuginfoUpgrade cluster-network-kmp-traceUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-traceUpgrade kernel-trace-debugsourceUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-ppc64Upgrade kernel-default-develUpgrade hyper-v-kmp-defaultUpgrade kernel-xenUpgrade kernel-pae-debuginfoUpgrade kernel-desktop-baseUpgrade sle-hae-releaseUpgrade hyper-v-kmp-traceUpgrade kernel-syms-rtUpgrade kernel-pae-base-debuginfoUpgrade kernel-desktop-debuginfoUpgrade kernel-ec2-debuginfoUpgrade drbd-kmp-rtUpgrade kernel-debug-devel-debuginfoUpgrade kernel-rt_traceUpgrade kernel-vanilla-develUpgrade kernel-pae-develUpgrade kernel-trace-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-ppc64Upgrade ext4dev-kmp-defaultUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-ec2Upgrade kernel-debug-base-debuginfoUpgrade kernel-pae-debugsourceUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade hyper-v-kmp-paeUpgrade xen-kmp-traceUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-traceUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-xenUpgrade kernel-debug-debugsourceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-trace-develUpgrade kernel-rt-baseUpgrade kernel-default-base-debuginfoUpgrade ofed-kmp-rt_traceUpgrade kernel-default-devel-debuginfoUpgrade ocfs2-kmp-paeUpgrade kernel-paeUpgrade kernel-desktop-develUpgrade xen-kmp-paeUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-traceUpgrade kernel-ec2-extraUpgrade btrfs-kmp-xenUpgrade kernel-symsUpgrade gfs2-kmp-xenUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-desktopUpgrade kernel-xen-extraUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-pae-extraUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-rt_trace-baseUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-default-baseUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-xen-devel-debuginfoUpgrade kernel-ppc64-develUpgrade kernel-vanilla-debugsourceUpgrade kernel-trace-baseUpgrade kernel-ppc64Upgrade btrfs-kmp-defaultUpgrade kernel-pae-devel-debuginfoUpgrade xen-kmp-defaultUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade ocfs2-kmp-traceUpgrade kernel-xen-develUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-debugUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade kernel-rt-develUpgrade kernel-default-debugsourceUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-default-debuginfoUpgrade cluster-network-kmp-rt_traceUpgrade kernel-pae-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-xen-debuginfoUpgrade kernel-ppc64-baseUpgrade kernel-trace-debuginfoUpgrade kernel-ec2-develUpgrade kernel-ec2-base-debuginfoUpgrade kernel-vanilla-baseUpgrade ofed-kmp-rtUpgrade kernel-default-extraUpgrade kernel-desktop-debugsourceUpgrade kernel-defaultUpgrade kernel-xen-debugsourceUpgrade kernel-trace-extraUpgrade kernel-rt_trace-develUpgrade kernel-ec2-debugsourceUpgrade kernel-docs | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-versatile | Nov 8, 2024 | Mar 22, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub