Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 277375 (CVE-2009-2287)

Summary: Kernel: kvm_arch_vcpu_ioctl_set_sregs NULL pointer dereference (CVE-2009-2287)
Product: Gentoo Security Reporter: Stefan Behte (RETIRED) <craig>
Component: KernelAssignee: Gentoo Security <security>
Severity: normal CC: hardened-kernel+disabled, kernel
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: [linux <2.6.30]
Package list:
Runtime testing required: ---

Description Stefan Behte (RETIRED) gentoo-dev Security 2009-07-10 23:19:56 UTC
CVE-2009-2287 (
  The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel
  2.6 before 2.6.30, when running on x86 systems, does not validate the
  page table root in a KVM_SET_SREGS call, which allows local users to
  cause a denial of service (crash or hang) via a crafted cr3 value,
  which triggers a NULL pointer dereference in the gfn_to_rmap function.
Comment 1 dacook 2009-07-17 17:22:00 UTC
According to the summary and upstream bug, it only affects <=kvm-84.