CVE-2009-1242
5.9 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
27.1%
The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka “Long mode enable”) bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65
lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
openwall.com/lists/oss-security/2009/04/01/3
patchwork.kernel.org/patch/15549/
secunia.com/advisories/34478
secunia.com/advisories/34981
secunia.com/advisories/35120
secunia.com/advisories/35121
secunia.com/advisories/35226
secunia.com/advisories/35387
secunia.com/advisories/35394
secunia.com/advisories/35656
vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585
wiki.rpath.com/Advisories:rPSA-2009-0084
www.debian.org/security/2009/dsa-1787
www.debian.org/security/2009/dsa-1800
www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1
www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log
www.securityfocus.com/archive/1/503610/100/0/threaded
www.securityfocus.com/bid/34331
www.ubuntu.com/usn/usn-793-1
www.vupen.com/english/advisories/2009/0924
bugzilla.redhat.com/show_bug.cgi?id=502109
exchange.xforce.ibmcloud.com/vulnerabilities/49594
www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html
Social References
More
Related
5.9 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
27.1%