CVE-2012-4461

Published: Jan 22, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.

Affected (9)

Products: Linux: Linux Kernel

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.6.8
Linux Linux Kernel	Version 3.6.1
Linux Linux Kernel	Version 3.6.2
Linux Linux Kernel	Version 3.6.3
Linux Linux Kernel	Version 3.6.4
Linux Linux Kernel	Version 3.6.5
Linux Linux Kernel	Version 3.6.6
Linux Linux Kernel	Version 3.6.7
Linux Linux Kernel	Version 3.6

References (22)

http://article.gmane.org/gmane.comp.emulators.kvm.devel/100742

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git%3Ba=commit%3Bh=6d1068b3a98519247d8ba4ec85cd40ac136dbdf9

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0223.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0882.html

Source: secalert@redhat.com

http://secunia.com/advisories/51160

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/06/14

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56414

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=862900

Source: secalert@redhat.com

https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html

Source: secalert@redhat.com

http://article.gmane.org/gmane.comp.emulators.kvm.devel/100742

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git%3Ba=commit%3Bh=6d1068b3a98519247d8ba4ec85cd40ac136dbdf9

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0223.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0882.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51160

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/11/06/14

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56414

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=862900

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.