Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
BID:37035
Info
Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
| Bugtraq ID: | 37035 |
| Class: | Design Error |
| CVE: |
CVE-2009-4004 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 16 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | Jan Kiszka |
| Vulnerable: |
Linux kernel 2.6.31 .2 Linux kernel 2.6.31 -rc7 Linux kernel 2.6.31 -rc6 Linux kernel 2.6.31 -rc3 Linux kernel 2.6.31 -rc1 Linux kernel 2.6.31 Linux kernel 2.6.30 .1 Linux kernel 2.6.30 -rc6 Linux kernel 2.6.30 -rc5 Linux kernel 2.6.30 -rc3 Linux kernel 2.6.30 -rc2 Linux kernel 2.6.30 -rc1 Linux kernel 2.6.30 Linux kernel 2.6.29 .4 Linux kernel 2.6.29 .1 Linux kernel 2.6.29 -git8 Linux kernel 2.6.29 -git14 Linux kernel 2.6.29 -git1 Linux kernel 2.6.29 Linux kernel 2.6.28 .9 Linux kernel 2.6.28 .8 Linux kernel 2.6.28 .6 Linux kernel 2.6.28 .5 Linux kernel 2.6.28 .3 Linux kernel 2.6.28 .2 Linux kernel 2.6.28 .1 Linux kernel 2.6.28 -rc7 Linux kernel 2.6.28 -rc5 Linux kernel 2.6.28 -rc1 Linux kernel 2.6.28 -git7 Linux kernel 2.6.28 Linux kernel 2.6.27 6 Linux kernel 2.6.27 3 Linux kernel 2.6.27 12 Linux kernel 2.6.27 .8 Linux kernel 2.6.27 .5 Linux kernel 2.6.27 .5 Linux kernel 2.6.27 .24 Linux kernel 2.6.27 .14 Linux kernel 2.6.27 .13 Linux kernel 2.6.27 .12 Linux kernel 2.6.27 -rc8-git5 Linux kernel 2.6.27 -rc8 Linux kernel 2.6.27 -rc6-git6 Linux kernel 2.6.27 -rc6 Linux kernel 2.6.27 -rc5 Linux kernel 2.6.27 -rc2 Linux kernel 2.6.27 -rc1 Linux kernel 2.6.27 Linux kernel 2.6.26 7 Linux kernel 2.6.26 .6 Linux kernel 2.6.26 .4 Linux kernel 2.6.26 .3 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.3 Linux kernel 2.6.32-rc5 Linux kernel 2.6.32-rc4 Linux kernel 2.6.32-rc3 Linux kernel 2.6.32-rc2 Linux kernel 2.6.32-rc1 Linux kernel 2.6.31.4 Linux kernel 2.6.31-rc9 Linux kernel 2.6.31-rc8 Linux kernel 2.6.31-rc5-git3 Linux kernel 2.6.31-rc2 Linux kernel 2.6.30.5 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3 Linux kernel 2.6.29-rc2-git1 Linux kernel 2.6.29-rc2 Linux kernel 2.6.29-rc1 Linux kernel 2.6.28.4 Linux kernel 2.6.26.1 Linux kernel 2.6.26-rc5-git1 Linux kernel 2.6.25-rc1 |
| Not Vulnerable: |
Linux kernel 2.6.32-rc7 |
Discussion
Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
The Linux kernel is prone to a memory-corruption vulnerability that affects the Kernel-based Virtual Machine (KVM).
Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers.
Versions prior to Linux kernel 2.6.32-rc7 are vulnerable.
The Linux kernel is prone to a memory-corruption vulnerability that affects the Kernel-based Virtual Machine (KVM).
Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers.
Versions prior to Linux kernel 2.6.32-rc7 are vulnerable.
Exploit / POC
Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Linux Kernel KVM 'KVM_MAX_MCE_BANKS' Memory Corruption Vulnerability
References:
References:
- KVM: x86: Catch potential overrun in MCE setup (Jan Kiszka)
- Linux 2.6.32-rc7 Changelog (Linux)
- Linux kernel Homepage (kernel.org)