Lucene search

K
mageiaGentoo FoundationMGASA-2014-0392
HistorySep 28, 2014 - 4:17 p.m.

Updated kernel & related packages provide 3.10 longterm support branch

2014-09-2816:17:31
Gentoo Foundation
advisories.mageia.org
14

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:H/Au:S/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

60.5%

This kernel update provides an update based on upstream 3.10.54 from the 3.10 -longterm branch. It also fixes the following security issue: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages. (CVE-2014-3601) For other changes, see the referenced changelogs.

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:H/Au:S/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

60.5%