CVE-2010-3698: Medium severity Linux Linux kernel vulnerability
Invoking ioctl(KVMRUN) while having invalid selector in fs and/or gs register (via LDT modifications) forces kernel to panic (DoS).
Other sources
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVMRUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3698?
CVE-2010-3698 has a severity rating of Medium, as it can lead to a denial of service by causing the kernel to panic.
How do I fix CVE-2010-3698?
To fix CVE-2010-3698, update the Linux kernel to version 2.6.36 or later.
What systems are affected by CVE-2010-3698?
CVE-2010-3698 affects Linux kernels prior to version 2.6.36 and specific distributions such as Debian and Fedora 13.
What kind of attack does CVE-2010-3698 facilitate?
CVE-2010-3698 facilitates a denial of service attack by causing a kernel panic when invoking ioctl(KVM_RUN) with invalid segment registers.
Is CVE-2010-3698 exploitable remotely?
CVE-2010-3698 is generally not exploitable remotely as it requires local access to trigger the kernel panic.