PT-2010-5009 · Linux+1 · Linux Kernel+1
Petr Matousek
·
Published
2010-11-10
·
Updated
2023-02-13
·
CVE-2010-3698
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36
Description
The issue is related to the KVM implementation in the Linux kernel, which does not properly reload the FS and GS segment registers. This can be exploited by host OS users to cause a denial of service, resulting in a host OS crash. The exploitation is possible via a KVM RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
Recommendations
For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.
Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat