Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
BID:64319
Info
Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
| Bugtraq ID: | 64319 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-6376 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 12 2013 12:00AM |
| Updated: | Apr 13 2015 10:25PM |
| Credit: | Lars Bull |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE SUSE Linux Enterprise High Availability Extension 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Linux Linux Kernel 3.12.5 Linux Linux Kernel 3.10.24 CentOS CentOS 6 |
| Not Vulnerable: | |
Discussion
Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
The Linux kernel is prone to a denial-of-service vulnerability due to an out-of-bounds access error.
Successful exploits will allow guest users to crash the host system, denying service to legitimate users.
The Linux kernel is prone to a denial-of-service vulnerability due to an out-of-bounds access error.
Successful exploits will allow guest users to crash the host system, denying service to legitimate users.
Exploit / POC
Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel KVM 'recalculate_apic_map()' Function Denial of Service Vulnerability
References:
References:
- CESA-2013:X018 Important Xen4CentOS kernel Security Update (CentOS)
- CVE-2013-6376 kernel: kvm: BUG_ON() in apic_cluster_id() (Red Hat )
- CVE-2013-6376 kernel: kvm: BUG_ON() in apic_cluster_id() (Red Hat Bugzilla)
- Github: KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376) (Gleb Natapov)
- KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376) (Gleb Natapov)
- Linux kernel Homepage (kernel.org)