CVE-2011-4347

2011-11-2500:00:00

ubuntu.com

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

48.5%

JSON

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the
KVM subsystem in the Linux kernel before 3.1.10 does not verify permission
to access PCI configuration space and BAR resources, which allows host OS
users to assign PCI devices and cause a denial of service (host OS crash)
via a KVM_ASSIGN_PCI_DEVICE operation.
Please note that privileged access was still needed to re-program the
device to for example issue DMA requests. This is typically achieved by
touching files on sysfs filesystem. These files are usually not
accessible to unprivileged users.
As a result, local user could use this flaw to crash the system.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-41.88UNKNOWN
ubuntu10.10noarchlinux< 2.6.35-32.68UNKNOWN
ubuntu11.04noarchlinux< 2.6.38-14.58UNKNOWN
ubuntu11.10noarchlinux< 3.0.0-18.31UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-345.47UNKNOWN
ubuntu10.04noarchlinux-lts-backport-maverick< 2.6.35-32.68~lucid1UNKNOWN
ubuntu10.04noarchlinux-lts-backport-natty< 2.6.38-14.58~lucid1UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric< 3.0.0-18.31~lucid1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	linux	< 2.6.32-41.88	UNKNOWN
ubuntu	10.10	noarch	linux	< 2.6.35-32.68	UNKNOWN
ubuntu	11.04	noarch	linux	< 2.6.38-14.58	UNKNOWN
ubuntu	11.10	noarch	linux	< 3.0.0-18.31	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-345.47	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-maverick	< 2.6.35-32.68~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-natty	< 2.6.38-14.58~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-oneiric	< 3.0.0-18.31~lucid1	UNKNOWN