The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvmUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade kmod-kvm | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Nov 10, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-39-genericUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-2.6.32-71-powerpcUpgrade linux-image-3.13.0-39-lowlatencyUpgrade linux-image-2.6.32-71-preemptUpgrade linux-image-2.6.32-71-virtualUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.13.0-39-powerpc64-smpUpgrade linux-image-2.6.32-375-ec2Upgrade linux-image-2.6.32-71-versatileUpgrade linux-image-3.13.0-39-powerpc64-embUpgrade linux-image-2.6.32-71-sparc64Upgrade linux-image-2.6.32-71-386Upgrade linux-image-3.13.0-39-powerpc-e500mcUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-3.16.0-24-lowlatencyUpgrade linux-image-3.16.0-24-powerpc64-embUpgrade linux-image-2.6.32-71-powerpc64-smpUpgrade linux-image-3.16.0-24-generic-lpaeUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-39-generic-lpaeUpgrade linux-image-3.16.0-24-powerpc-smpUpgrade linux-image-3.16.0-24-genericUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-2.6.32-71-powerpc-smpUpgrade linux-image-2.6.32-71-generic-paeUpgrade linux-image-3.13.0-39-powerpc-smpUpgrade linux-image-3.13.0-39-powerpc-e500Upgrade linux-image-3.2.0-72-genericUpgrade linux-image-2.6.32-71-lpiaUpgrade linux-image-3.16.0-24-powerpc-e500mcUpgrade linux-image-2.6.32-71-ia64Upgrade linux-image-3.16.0-24-powerpc64-smpUpgrade linux-image-2.6.32-71-sparc64-smpUpgrade linux-image-2.6.32-71-genericUpgrade linux-image-2.6.32-71-server | Nov 8, 2024 | Nov 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub