medium4.7Public exploit code
CVE-2012-0045
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 3.1.8 - KVM Local Denial of Service2011-12-29 · dos · linux · Verified
Impact
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 3.2.13 Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4 |
References
- NVD record
- CVE.org record
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
- http://www.openwall.com/lists/oss-security/2012/01/12/2
- https://bugzilla.redhat.com/show_bug.cgi?id=773370
- https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
- http://www.openwall.com/lists/oss-security/2012/01/12/2
- https://bugzilla.redhat.com/show_bug.cgi?id=773370
- https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84