RHEL 5 : kvm (RHSA-2010:0088)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0088 advisory. - kvm-userspace-rhel5: usb-linux.c: fix buffer overflow CVE-2010-0297 - kvm: emulator privilege escalation CVE-2010-0298 - kvm: emulator...

kvm: emulator privilege escalation IOPL/CPL level check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...