The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kvmUpgrade kmod-kvm-debugUpgrade kernel-headersUpgrade kvm-toolsUpgrade kernelUpgrade python-perf | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade btrfs-kmp-xenUpgrade cluster-network-kmp-xenUpgrade kernel-sourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-paeUpgrade kernel-ppc64Upgrade kernel-rt_trace-develUpgrade ocfs2-kmp-defaultUpgrade kernel-desktop-debugsourceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-debugUpgrade ocfs2-kmp-traceUpgrade kernel-ec2-debugsourceUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-rt-develUpgrade cluster-network-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-symsUpgrade kernel-pae-extraUpgrade kernel-vanillaUpgrade kernel-develUpgrade kernel-xen-extraUpgrade kernel-pae-devel-debuginfoUpgrade kernel-xen-develUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade kernel-ppc64-baseUpgrade kernel-xen-devel-debuginfoUpgrade kernel-trace-debuginfoUpgrade kernel-xen-debuginfoUpgrade xen-kmp-defaultUpgrade kernel-docsUpgrade kernel-trace-extraUpgrade kernel-xen-baseUpgrade kernel-debug-debuginfoUpgrade ofed-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-default-debuginfoUpgrade kernel-pae-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-extraUpgrade kernel-default-debugsourceUpgrade kernel-xen-debugsourceUpgrade cluster-network-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-ec2-base-debuginfoUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-ppc64-develUpgrade kernel-defaultUpgrade gfs2-kmp-traceUpgrade kernel-ec2-extraUpgrade gfs2-kmp-xenUpgrade kernel-desktopUpgrade cluster-network-kmp-rtUpgrade kernel-debug-base-debuginfoUpgrade ocfs2-kmp-paeUpgrade kernel-desktop-base-debuginfoUpgrade kernel-default-develUpgrade cluster-network-kmp-traceUpgrade kernel-source-rtUpgrade ext4dev-kmp-defaultUpgrade kernel-desktop-baseUpgrade btrfs-kmp-paeUpgrade kernel-default-devel-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-ppc64Upgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-ec2-debuginfoUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-desktop-debuginfoUpgrade kernel-syms-rtUpgrade kernel-default-base-debuginfoUpgrade kernel-rt_traceUpgrade kernel-trace-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-pae-base-debuginfoUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade kernel-debug-devel-debuginfoUpgrade kernel-desktop-devel-debuginfoUpgrade drbd-kmp-rtUpgrade kernel-pae-debuginfoUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade hyper-v-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-xen-base-debuginfoUpgrade kernel-rt-baseUpgrade kernel-default-manUpgrade kernel-debug-debugsourceUpgrade kernel-trace-devel-debuginfoUpgrade ofed-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade kernel-trace-develUpgrade ext4dev-kmp-paeUpgrade kernel-pae-debugsourceUpgrade ext4dev-kmp-traceUpgrade kernel-vanilla-debuginfoUpgrade kernel-xenUpgrade ext4dev-kmp-xenUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-paeUpgrade kernel-desktop-develUpgrade hyper-v-kmp-traceUpgrade sle-hae-releaseUpgrade kernel-traceUpgrade gfs2-kmp-ppc64Upgrade kernel-trace-debugsource | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.2.0-41-virtualUpgrade linux-image-2.6.32-48-ia64 | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub