Description
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +14 | 2.6.32-71.7.1.el6 | RHSA-2010:0842 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | kvm +3 | 83-164.el5_5.25 | RHSA-2010:0898 |
Advisories 2
- RHSA-2010:0842 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2010:0898 Red Hat Security Advisory: kvm security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2010:0898 vendor-advisory
- FEDORA-2010-18983 vendor-advisory
- ADV-2010-3123 vdb-entry
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9581d442b9058d3699b4be568b6e5eae38a41493
- ADV-2010-3321 vdb-entry
- RHSA-2010:0842 vendor-advisory
- 44500 vdb-entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
- MDVSA-2011:029 vendor-advisory
- 42745 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=639879