CVE-2009-4031

2009-11-2913:07:32

CWE-20

[email protected]

web.nvd.nist.gov

cve-2009-4031

linux kernel

kvm subsystem

x86 emulator

denial of service

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

61.3%

JSON

The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.

Affected configurations

NVD

Node

linuxlinux_kernelRange<2.6.32

linuxlinux_kernelMatch2.6.32-

linuxlinux_kernelMatch2.6.32rc1

linuxlinux_kernelMatch2.6.32rc2

linuxlinux_kernelMatch2.6.32rc3

linuxlinux_kernelMatch2.6.32rc4

linuxlinux_kernelMatch2.6.32rc5

linuxlinux_kernelMatch2.6.32rc6

linuxlinux_kernelMatch2.6.32rc7

VendorProductVersionCPE
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:-::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc6::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc3::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc2::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc5::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc4::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc7::
linuxlinux_kernel2.6.32cpe:/o:linux:linux_kernel:2.6.32:rc1::

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:-::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc6::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc3::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc2::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc5::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc4::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc7::
linux	linux_kernel	2.6.32	cpe:/o:linux:linux_kernel:2.6.32:rc1::