NetSight
IP …
medium5.5

CVE-2014-3610

The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a…

Impact

The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.17.2
CanonicalUbuntu Linux
Versions 10.04, 12.04
DebianDebian Linux
Version 7.0
OpensuseEvergreen
Version 11.4
SuseSuse Linux Enterprise Server
Version 11

References