Skip to content
OpenAdvisories
Unscored CVE-2009-4031 EUVD-2009-4002GHSA-vmf9-49hh-xhh2

The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20…

Published Nov 27, 2009 · Updated Aug 7, 2024 · Assigned by redhat

Description

The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 5.0 kvm 72+dfsg-5~lenny4 DSA-1962-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 5 rhev-hypervisor +1 5.4-2.1.3.el5_4rhev2_1 RHSA-2009:1692
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Virtualization 5 kvm +3 83-105.el5_4.13 RHSA-2009:1659

Advisories 3

References