CVE-2012-4461: Low severity Linux Linux kernel vulnerability
A flaw has been found in the way Linux kernel's KVM subsystem handled vcpu->arch.cr4 X86CR4OSXSAVE bit set upon guest enter. On hosts without the XSAVE feature an unprivileged local user could use this flaw to crash the system.
Acknowledgements:
Red Hat would like to thank Jon Howell for reporting this issue.
Other sources
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVMSETSREGS ioctl to set the X86CR4OSXSAVE bit in the guest cr4 register, then calling the KVMRUN ioctl.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4461?
CVE-2012-4461 is considered a high severity vulnerability due to its potential to allow unprivileged local users to crash the system.
How do I fix CVE-2012-4461?
To fix CVE-2012-4461, upgrade your Linux kernel to a version that is 3.6.9 or higher.
Which versions of the Linux kernel are affected by CVE-2012-4461?
CVE-2012-4461 affects Linux kernel versions up to 3.6.8 and specific versions like 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, and 3.6.7.
Who discovered the vulnerability CVE-2012-4461?
The vulnerability CVE-2012-4461 was acknowledged by Red Hat, which thanked Jon Howell for reporting it.
What impact does CVE-2012-4461 have on system security?
CVE-2012-4461 can allow an unprivileged local user to crash the system, posing a risk to availability.