| The Vigil@nce team watches vulnerabilities impacting your computers, and then offers solutions, a database and tools to correct them. |
|
 |
|
|
|
vulnerability CVE-2009-2287
Linux kernel: denial of service via KVM and CR3
Synthesis of the vulnerability
| An attacker inside a KVM guest system can use the CR3 register in order to generate a denial of service. |
Severity: 1/4.
Creation date: 30/06/2009.
|
Impacted products
Description of the vulnerability
The code of the KVM (Kernel Virtual Machine) uses the kvm_sregs structure to store Intel registers which are to be modified with KVM_SET_SREGS.
The CR3 register (kvm_sregs.cr3) contains the base address of the Page Directory Table, used for memory paging.
When the address indicated by CR3 is invalid, a NULL pointer is used by the gfn_to_rmap() function. This error leads to a denial of service.
An attacker inside a KVM guest system can therefore use the CR3 register in order to generate a denial of service. |
Share this bulletin
Complete Vigil@nce bulletin
Characteristics
Title: Linux kernel: denial of service via KVM and CR3.
Keywords: CR3 Directory Intel KVM KVM_SET_SREGS Kernel Linux Machine NULL Page Table Virtual cr3 denial gfn_to_rmap kernel kvm_sregs service.
Identifiers: BID-35529, CVE-2009-2287, DSA 1845-1, DSA-1846-1, MDVSA-2010:188, MDVSA-2010:198, VIGILANCE-VUL-8830.
|
Information sources
Solutions for this vulnerability
Computer vulnerabilities tracking service
Vigil@nce provides application vulnerability announces. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. The technology watch team tracks security threats targeting the computer system. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system.
|
