Matt T. Yourst

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.30 **Description** The issue allows local users to cause a denial of service, resulting in a system crash or hang, by providing a crafted cr3 value in a KVM SET SREGS call. This triggers a NULL pointer dereference in the gfn to rmap function due to the lack of validation of the page table root. **Recommendations** For Linux kernel versions prior to 2.6.30, update to version 2.6.30 or later to resolve the issue.