The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region a related issue to CVE-2010-0306.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

KVM 83 x86 emulator ignores current and io privilege levels, enabling CPL3 access to IO and MMIO (CVE-2010-0306).

Reporter	Title	Published	Views	Family All 59
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2010-0298)	10 Feb 202500:00	–	nessus
Tenable Nessus	CentOS 5 : kvm (CESA-2010:0088)	10 Feb 201000:00	–	nessus
Tenable Nessus	Debian DSA-1996-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak	24 Feb 201000:00	–	nessus
Tenable Nessus	Debian DSA-2010-1 : kvm - privilege escalation/denial of service	11 Mar 201000:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kernel (CVE-2010-0298)	16 Aug 202400:00	–	nessus
Tenable Nessus	MiracleLinux 3 : kmod-kvm-84-8.AXS3 (AXSA:2010-131:01)	14 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 5 : kvm (ELSA-2010-0088)	12 Jul 201300:00	–	nessus
Tenable Nessus	Oracle Linux 5 : kvm (ELSA-2010-0271)	7 Sep 202300:00	–	nessus
Tenable Nessus	RHEL 5 : kvm (RHSA-2010:0088)	24 Jan 201300:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : kvm on SL5.4 i386/x86_64	1 Aug 201200:00	–	nessus