Skip to content
OpenAdvisories
Unscored CVE-2009-3290 EUVD-2009-3272GHSA-854c-mqcx-rhcc

The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when runn…

Published Sep 22, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 kvm 72+dfsg-5+squeeze1 DTSA-203-1
Debian 5.0 kvm 72+dfsg-5~lenny3 DSA-1907-1
Debian 5.0 linux-2.6 2.6.26-19lenny1 DSA-1915-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Rhel Virtualization 5 kvm +3 83-105.el5_4.7 RHSA-2009:1465

Advisories 4

References