CVE-2014-3690: Medium severity linux kernel vulnerability
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PRSETTSC prctl calls within a modified copy of QEMU.
Other sources
It was found that the host cr4 value can change across vm entries on the same vcpu and yet it was being treated as being constant. This can interfere with, for example, PRSETTSC settings (cr4/TSD bit), leading to inconsistent state.
A local, unprivileged user could use this flaw to cause denial of service on the system.
Acknowledgements:
Red Hat would like to thank Andy Lutomirski for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3690?
CVE-2014-3690 is considered to have a medium severity level due to its potential to cause denial of service on affected systems.
How do I fix CVE-2014-3690?
To fix CVE-2014-3690, update the Linux kernel to version 3.17.2 or later or apply the appropriate patches provided by your distribution.
Which systems are affected by CVE-2014-3690?
CVE-2014-3690 affects various versions of the Linux kernel, specifically those prior to 3.17.2 and certain versions of SUSE, Ubuntu, Debian, and Red Hat Enterprise Linux.
What impact can CVE-2014-3690 have on my system?
CVE-2014-3690 can allow attackers to terminate arbitrary processes or disrupt system operations, leading to a denial of service.
Is there a known exploit for CVE-2014-3690?
Yes, there are reported exploits that leverage CVE-2014-3690 to compromise host systems running affected versions of the Linux kernel.