PT-2017-1185 · Linux+5 · Linux Kernel+5

Dmitry Vyukov · Published 2017-02-05 · Updated 2023-02-12 · CVE-2017-2596

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.8

Description The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of service, specifically through memory consumption. The nested vmx check vmptr function in the Linux kernel improperly emulates the VMXON instruction, allowing KVM L1 guest OS users to cause a denial of service by leveraging the mishandling of page references.

Recommendations For Linux kernel versions prior to 4.9.8, update to version 4.9.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the nested vmx check vmptr function to minimize the risk of exploitation.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

CWE-399

Related Identifiers

ALT-PU-2017-1152

ALT-PU-2017-1330

BDU:2017-00296

CESA-2017_1842

CVE-2017-2596

DSA-3791-1

OPENSUSE-SU-2017_0906-1

OPENSUSE-SU-2017_0907-1

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017_1842

RHSA-2017_2077

SUSE-SU-2017:1183-1

SUSE-SU-2017:1990-1

USN-3293-1

USN-3312-1

USN-3312-2

USN-3361-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 463

• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2596 · Security Note
• https://ubuntu.com/security/CVE-2017-5970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8924 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3293-1 · Vendor Advisory
• http://debian.org/security/2017/dsa-3791 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3361-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7645 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3312-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7261 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1417812 · Patch