CVE-2014-7842: Race Condition
Published Sep 24, 2014
·Updated
It was found that reporting emulation failures to user space could lead to either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. Please note that on certain systems, HPET is mapped to userspace as part of vdso (vvar) and thus an unprivileged user may generate MMIO transactions (and enter the emulator) this way.
Other sources
Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313.
Affected Software
207 affected componentsFixes available
redhat/kernel<0:2.6.32-642.el6
0:2.6.32-642.el6
redhat/kernel<0:3.10.0-327.el7
0:3.10.0-327.el7
Linux Linux kernel<=3.17.3
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.10
Linux Linux kernel=3.10.0
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.10
Linux Linux kernel=3.10.11
Linux Linux kernel=3.10.12
Linux Linux kernel=3.10.13
Linux Linux kernel=3.10.14
Linux Linux kernel=3.10.15
Linux Linux kernel=3.10.16
Linux Linux kernel=3.10.17
Linux Linux kernel=3.10.18
Linux Linux kernel=3.10.19
Linux Linux kernel=3.10.20
Linux Linux kernel=3.10.21
Linux Linux kernel=3.10.22
Linux Linux kernel=3.10.23
Linux Linux kernel=3.10.24
Linux Linux kernel=3.10.25
Linux Linux kernel=3.10.26
Linux Linux kernel=3.10.27
Linux Linux kernel=3.10.28
Linux Linux kernel=3.10.29
Linux Linux kernel=3.11
Linux Linux kernel=3.11.1
Linux Linux kernel=3.11.2
Linux Linux kernel=3.11.3
Linux Linux kernel=3.11.4
Linux Linux kernel=3.11.5
Linux Linux kernel=3.11.6
Linux Linux kernel=3.11.7
Linux Linux kernel=3.11.8
Linux Linux kernel=3.11.9
Linux Linux kernel=3.11.10
Linux Linux kernel=3.12
Linux Linux kernel=3.12.1
Linux Linux kernel=3.12.2
Linux Linux kernel=3.12.3
Linux Linux kernel=3.12.4
Linux Linux kernel=3.12.5
Linux Linux kernel=3.12.6
Linux Linux kernel=3.12.7
Linux Linux kernel=3.12.8
Linux Linux kernel=3.12.9
Linux Linux kernel=3.12.10
Linux Linux kernel=3.12.11
Linux Linux kernel=3.12.12
Linux Linux kernel=3.12.13
Linux Linux kernel=3.12.14
Linux Linux kernel=3.12.15
Linux Linux kernel=3.12.16
Linux Linux kernel=3.12.17
Linux Linux kernel=3.13
Linux Linux kernel=3.13.1
Linux Linux kernel=3.13.2
Linux Linux kernel=3.13.3
Linux Linux kernel=3.13.4
Linux Linux kernel=3.13.5
Linux Linux kernel=3.13.6
Linux Linux kernel=3.13.7
Linux Linux kernel=3.13.8
Linux Linux kernel=3.13.9
Linux Linux kernel=3.13.10
Linux Linux kernel=3.13.11
Linux Linux kernel=3.14
Linux Linux kernel=3.14-rc1
Linux Linux kernel=3.14-rc2
Linux Linux kernel=3.14-rc3
Linux Linux kernel=3.14-rc4
Linux Linux kernel=3.14-rc5
Linux Linux kernel=3.14-rc6
Linux Linux kernel=3.14-rc7
Linux Linux kernel=3.14-rc8
Linux Linux kernel=3.14.1
Linux Linux kernel=3.14.2
Linux Linux kernel=3.14.3
Linux Linux kernel=3.14.4
Linux Linux kernel=3.14.5
Linux Linux kernel=3.15
Linux Linux kernel=3.15.1
Linux Linux kernel=3.15.2
Linux Linux kernel=3.15.3
Linux Linux kernel=3.15.4
Linux Linux kernel=3.15.5
Linux Linux kernel=3.15.6
Linux Linux kernel=3.15.7
Linux Linux kernel=3.15.8
Linux Linux kernel=3.16.0
Linux Linux kernel=3.16.1
Linux Linux kernel=3.17
Linux Linux kernel=3.17.1
Linux Linux kernel=3.17.2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Sep 24, 2014
CVE Published
12:00 AM
Nov 30, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:07 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:04 AM
RemedyDescriptionSeverityAffected Software
Apr 24, 2025
Data Sourced
via Debian·02:09 AM
DescriptionAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2014-7842?
CVE-2014-7842 has a medium severity level, as it allows for potential denial of service under certain conditions.
2
How do I fix CVE-2014-7842?
To resolve CVE-2014-7842, upgrade to a patched version of the Linux Kernel that addresses this vulnerability.
3
Who is affected by CVE-2014-7842?
CVE-2014-7842 affects multiple versions of the Linux Kernel, including kernels from Red Hat and Debian distributions.
4
What type of systems could exploit CVE-2014-7842?
Local users with access to the MMIO area or I/O ports could exploit CVE-2014-7842 to cause a denial of service.
5
When was CVE-2014-7842 published?
CVE-2014-7842 was published on December 22, 2014.