CVE-2009-3638
6.4 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.1%
Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf
marc.info/?l=oss-security&m=125628917011048&w=2
marc.info/?l=oss-security&m=125632898507373&w=2
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4
www.mandriva.com/security/advisories?name=MDVSA-2009:329
www.securityfocus.com/bid/36803
www.ubuntu.com/usn/usn-864-1
bugzilla.redhat.com/show_bug.cgi?id=530515
exchange.xforce.ibmcloud.com/vulnerabilities/53934
www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
Social References
More
Related
6.4 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.1%