arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade perf | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 10, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.2.0-72-highbank | Nov 8, 2024 | Nov 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub