The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade kernel-develUpgrade perfUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernelUpgrade kvm-toolsUpgrade python-perfUpgrade kmod-kvm-debugUpgrade kernel-headersUpgrade kvm | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 5, 2022 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-debug-develUpgrade kernel-xen-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-debug-baseUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-paeUpgrade kernel-ec2-extraUpgrade btrfs-kmp-xenUpgrade cluster-network-kmp-defaultUpgrade kernel-develUpgrade btrfs-kmp-defaultUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-pae-extraUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-xen-devel-debuginfoUpgrade kernel-xen-develUpgrade kernel-xen-extraUpgrade kernel-default-debugsourceUpgrade ocfs2-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-pae-devel-debuginfoUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-xen-baseUpgrade kernel-desktopUpgrade kernel-rt_trace-baseUpgrade gfs2-kmp-traceUpgrade xen-kmp-defaultUpgrade kernel-docsUpgrade kernel-trace-extraUpgrade kernel-ppc64-baseUpgrade kernel-vanilla-devel-debuginfoUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-default-debuginfoUpgrade kernel-default-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-extraUpgrade kernel-symsUpgrade iscsitarget-kmp-rtUpgrade kernel-ec2-base-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-debug-debuginfoUpgrade kernel-pae-baseUpgrade kernel-rt-develUpgrade kernel-ppc64-develUpgrade kernel-ec2-debugsourceUpgrade kernel-vanillaUpgrade cluster-network-kmp-paeUpgrade kernel-desktop-debugsourceUpgrade kernel-vanilla-baseUpgrade kernel-rt_trace-develUpgrade kernel-vanilla-debugsourceUpgrade cluster-network-kmp-xenUpgrade kernel-xen-debugsourceUpgrade kernel-trace-debuginfoUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade kernel-pae-debugsourceUpgrade kernel-vanilla-debuginfoUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-debuginfoUpgrade kernel-desktop-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-xenUpgrade cluster-network-kmp-traceUpgrade kernel-rt_traceUpgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-source-rtUpgrade sle-hae-releaseUpgrade kernel-debug-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade ocfs2-kmp-ppc64Upgrade ocfs2-kmp-paeUpgrade xen-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-desktop-devel-debuginfoUpgrade gfs2-kmp-ppc64Upgrade kernel-traceUpgrade kernel-ec2-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade ofed-kmp-rt_traceUpgrade kernel-xen-base-debuginfoUpgrade kernel-default-manUpgrade kernel-debug-debugsourceUpgrade kernel-rtUpgrade kernel-rt-baseUpgrade kernel-ec2Upgrade kernel-desktop-develUpgrade btrfs-kmp-paeUpgrade kernel-trace-debugsourceUpgrade kernel-trace-develUpgrade cluster-network-kmp-ppc64Upgrade xen-kmp-paeUpgrade kernel-trace-devel-debuginfoUpgrade ocfs2-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-desktop-baseUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-pae-develUpgrade ext4dev-kmp-xenUpgrade kernel-vanilla-develUpgrade kernel-pae-base-debuginfoUpgrade hyper-v-kmp-traceUpgrade kernel-syms-rtUpgrade kernel-default-base-debuginfoUpgrade lttng-modules-kmp-rtUpgrade drbd-kmp-rt | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-41-genericUpgrade linux-image-2.6.32-48-sparc64 | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub