The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 12, 2014 |
| F5 Big Ip | — | — | Nov 14, 2016 | Dec 12, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 17, 2016 | Dec 12, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Dec 12, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-70-ia64Upgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-2.6.32-70-386Upgrade linux-image-3.2.0-74-virtualUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-3.2.0-1458-omap4Upgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-2.6.32-70-serverUpgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-2.6.32-70-virtualUpgrade linux-image-3.2.0-74-powerpc64-smpUpgrade linux-image-3.2.0-74-genericUpgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-3.2.0-74-highbankUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-74-omapUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-3.2.0-74-powerpc-smpUpgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-2.6.32-374-ec2Upgrade linux-image-3.2.0-74-generic-paeUpgrade linux-image-2.6.32-70-powerpc64-smp | Nov 8, 2024 | Dec 12, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub