CVE-2010-0435: Null Pointer Dereference
Gleb Napatov found a bug in KVM that can be used to crash the host on Intel machines. If emulator is tricked into emulating mov to/from DR instruction it causes NULL pointer dereference on VMX since kvmx86ops->(set|get)dr are not initialized. Recently this is not exploitable from guest userspace, but malicious guest kernel can trigger it easily.
Other sources
The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualizat ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0435?
CVE-2010-0435 has a high severity rating as it can lead to crashes on Intel host machines.
How do I fix CVE-2010-0435?
To fix CVE-2010-0435, users should update their KVM and Linux packages to the latest versions provided by their distribution.
Which versions are affected by CVE-2010-0435?
CVE-2010-0435 affects certain versions of Linux kernel and KVM, specifically those prior to the patches that address this vulnerability.
Can CVE-2010-0435 be exploited from a guest user space?
No, CVE-2010-0435 is not currently exploitable from guest user space according to recent assessments.
Who discovered the CVE-2010-0435 vulnerability?
The bug associated with CVE-2010-0435 was discovered by Gleb Napatov.