CVE-2010-2938: Medium severity Linux Linux kernel vulnerability
arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying hardware support for these fields, which allows local users to cause a denial of service (host OS crash) by requesting a VMCS dump for a fully virtualized Xen guest.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2938?
CVE-2010-2938 is classified as a moderate severity vulnerability.
How do I fix CVE-2010-2938?
To fix CVE-2010-2938, upgrade to a patched version of the Linux kernel that resolves this issue.
What systems are affected by CVE-2010-2938?
CVE-2010-2938 affects Linux Kernel version 2.6.18 and Red Hat Enterprise Linux 5 running on unsupported Intel platforms.
What type of vulnerability is CVE-2010-2938?
CVE-2010-2938 is a vulnerability related to improper verification of hardware support in the VMCS implementation.
Is CVE-2010-2938 exploitable?
Yes, CVE-2010-2938 can potentially be exploited if an attacker can execute code on the affected system.