Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability

Bugtraq ID:	70712
Class:	Unknown
CVE:	CVE-2014-8481
Remote:	Yes
Local:	No
Published:	Oct 24 2014 12:00AM
Updated:	Apr 13 2015 08:48PM
Credit:	Andy Lutomirski
Vulnerable:
Not Vulnerable:

Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability

The Linux Kernel is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to trigger a kernel panic, denying service to legitimate users.

Note: This issue exists due to an incomplete fix for CVE-2014-8480.(identified in BID 70710 - Linux Kernel KVM CVE-2014-8480 Denial of Service Vulnerability).

Linux Kernel 3.17 is vulnerable.

Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability

References:

• Linux 3.17 guest-triggerable KVM OOPS (SecLists.Org)
  
• Linux kernel Homepage (kernel.org)