NetSight
IP …
low1.9

CVE-2012-4461

The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of servic…

Impact

The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.6.8
Versions 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4

References