| Summary: | Kernel: KVM x86 emulator limit instructions to 15 bytes (CVE-2009-4031) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Bjoern Tropf (RETIRED) <asym> |
| Component: | Kernel | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | ||
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commit;h=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88 | ||
| Whiteboard: | [linux <2.6.32] | ||
| Package list: | Runtime testing required: | --- | |
|
Description
Bjoern Tropf (RETIRED)
2009-11-25 18:16:08 UTC
CVE-2009-4031 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-4031): The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support. |
