CVE-2014-3611: Race Condition
Last updated 24 July 2024
Other sources
Race condition in the kvmmigratepittimer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation.
— Launchpad
There's a race condition in the PIT emulation code in KVM. In kvmmigratepittimer the pittimer object is accessed without synchronization.
A local guest user with access to the PIT i/o ports could use this flaw to crash the host.
Acknowledgements:
Red Hat would like to thank Lars Bull of Google for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3611?
CVE-2014-3611 is classified as a denial of service vulnerability that can lead to a host OS crash.
How do I fix CVE-2014-3611?
To fix CVE-2014-3611, you should upgrade to a version of the Linux kernel that is above 3.17.2 or apply relevant patch updates from your distribution.
Which versions of Linux are affected by CVE-2014-3611?
CVE-2014-3611 affects Linux kernel versions up to and including 3.17.2, as well as specific versions of Red Hat Enterprise Linux, Ubuntu, and Debian.
What kind of applications are impacted by CVE-2014-3611?
CVE-2014-3611 impacts applications running on guest operating systems that leverage the KVM subsystem of the Linux kernel.
How can I identify if my system is vulnerable to CVE-2014-3611?
You can identify if your system is vulnerable to CVE-2014-3611 by checking the version of your Linux kernel and ensuring it's not older than 3.17.2.