arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 10, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2014 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-default | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.16.0-24-generic-lpaeUpgrade linux-image-3.16.0-24-lowlatencyUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-3.13.0-39-powerpc64-smpUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.16.0-24-powerpc-smpUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.13.0-39-generic-lpaeUpgrade linux-image-3.16.0-24-genericUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-39-genericUpgrade linux-image-3.13.0-39-powerpc-e500Upgrade linux-image-3.13.0-39-powerpc-e500mcUpgrade linux-image-3.16.0-24-powerpc-e500mcUpgrade linux-image-3.16.0-24-powerpc64-embUpgrade linux-image-3.16.0-24-powerpc64-smpUpgrade linux-image-3.13.0-39-lowlatencyUpgrade linux-image-3.13.0-39-powerpc64-embUpgrade linux-image-3.13.0-39-powerpc-smp | Nov 8, 2024 | Nov 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub