CVE-2009-1242

Published: Apr 6, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.

Affected (10)

Products: Linux: Linux Kernel · Opensuse: Opensuse · Debian: Debian Linux · +2 more

Show all products

Linux: Linux Kernel · Opensuse: Opensuse · Debian: Debian Linux · Canonical: Ubuntu Linux · Fedoraproject: Fedora

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.29.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (54)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2009/04/01/3

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://patchwork.kernel.org/patch/15549/

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/34478

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34981

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35120

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35121

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35226

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35387

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35394

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35656

Source: cve@mitre.org

Third Party Advisory

http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585

Source: cve@mitre.org

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0084

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2009/dsa-1787

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2009/dsa-1800

Source: cve@mitre.org

Third Party Advisory

http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1

Source: cve@mitre.org

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/503610/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34331

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-793-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/0924

Source: cve@mitre.org

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=502109

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49594

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65