Skip to content
OpenAdvisories
Unscored CVE-2009-3722 EUVD-2009-3695GHSA-qx58-4v64-2f59

The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current …

Published Oct 30, 2009 · Updated Aug 7, 2024 · Assigned by redhat

Description

The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 5.0 kvm 72+dfsg-5~lenny4 DSA-1962-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 5 rhev-hypervisor +1 5.4-2.1.10.el5_4rhev2_1 RHSA-2010:0172
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Virtualization 5 kvm +3 83-105.el5_4.27 RHSA-2010:0126

Advisories 3

References