CVE-2009-1242: Input Validation
Description of problem: The vmxsetmsr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFERLME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x8664 platform.
Reference: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiffplain;h=16175a796d061833aacfbd9672235f2d2725df65
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (KVM VMX on i386)to a version that resolves this vulnerability.Fixed in 2.6.29.1
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1242?
CVE-2009-1242 is classified as a moderate severity vulnerability due to its potential for causing a denial of service.
How do I fix CVE-2009-1242?
To fix CVE-2009-1242, you should upgrade to a version of the Linux kernel greater than 2.6.29.1.
Which systems are affected by CVE-2009-1242?
CVE-2009-1242 affects various versions of the Linux kernel prior to 2.6.29.1, as well as specific versions of openSUSE, Debian, and Ubuntu.
What is the impact of CVE-2009-1242?
The impact of CVE-2009-1242 is that it allows guest OS users to cause a denial of service by setting the EFER_LME bit in the Extended Control Register.
Is there a patch available for CVE-2009-1242?
Yes, there are patches available that address CVE-2009-1242 as part of the kernel updates beyond version 2.6.29.1.