NetSight
IP …
medium5.5

CVE-2014-3646

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS use…

Impact

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.17.2
RedhatEnterprise Linux
Version 5.0
CanonicalUbuntu Linux
Version 12.04
DebianDebian Linux
Version 7.0
OpensuseEvergreen
Version 11.4
SuseSuse Linux Enterprise Server
Version 11

References