Debian DSA-1962-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3638 It was discovered an Integer overflow in the kvmdevioctlgetsupportedcpuid function. This allows local users to ha...

Design/Logic Flaw

The handledr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level CPL before accessing a debug register, which allows guest OS users to cause a denial of service trap on the host OS via a crafted application...

PT-2009-5979 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31.1 Description: The issue is related to the handle dr function in the KVM subsystem, which does not properly verify the Current Privilege Level CPL before accessing a debug register. This allows guest OS...