CVE-2013-4592: Medium severity linux kernel vulnerability
Published Nov 18, 2013
·
Updated
Last updated 24 July 2024
Other sources
Memory leak in the kvmsetmemoryregion function in virt/kvm/kvmmain.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.
— Launchpad
When a user memory slot is moved (ie. the basegfn changes), iommu pages are neither unpinned nor unmapped. The memory for these pages then cannot be recovered without rebooting the system.
Local user with ability to assign device (with access to PCI sysfs files for a device) could use this flaw to DoS the system.
CVE-2013-4592 is classified as a high severity vulnerability due to its potential to cause denial of service by consuming significant memory resources.
2
How do I fix CVE-2013-4592?
To remediate CVE-2013-4592, upgrade to a patched version of the Linux kernel, specifically version 3.10 or later, which addresses this vulnerability.
3
Who is affected by CVE-2013-4592?
CVE-2013-4592 affects local users on systems running vulnerable versions of the Linux kernel prior to 3.10.
4
What systems are impacted by CVE-2013-4592?
Any system running Linux kernel versions lower than 3.10 is potentially impacted by CVE-2013-4592.
5
What type of vulnerability is CVE-2013-4592?
CVE-2013-4592 is a memory leak vulnerability in the __kvm_set_memory_region function within the Linux kernel.
SecAlerts Pty Ltd. 132 Wickham Terrace Fortitude Valley, QLD 4006, Australia info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.