PT-2014-5417 · Linux+4 · Linux Kernel+4
Publicado
2014-10-23
·
Atualizado
2023-02-13
·
CVE-2014-3610
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.17.2
Description
The WRMSR processing functionality in the KVM subsystem does not properly handle the writing of a non-canonical address to a model-specific register. This allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the
wrmsr interception function in arch/x86/kvm/svm.c and the handle wrmsr function in arch/x86/kvm/vmx.c. A privileged guest user can use this flaw to crash the host.Recommendations
To mitigate this issue, enable CONFIG PARAVIRT when building the kernel, as this causes
wrmsrl() to invoke a safe msr write variant.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Red Hat
Suse
Ubuntu