CVE-2015-4692: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernel built for the x86 architecture, with the KVM virtualisation support(CONFIGKVM) is vulnerable to a NULL pointer dereference flaw. It could occur while doing KVM's Virtual CPU ioctl(2) call, in Linux kernel's kvmapichasevents() function.
An unprivileged user able to access "/dev/kvm" device, could use this flaw to crash the system kernel resulting in DoS.
Upstream fix: ------------- -> https://lkml.org/lkml/2015/6/4/163
Reference: ---------- -> http://seclists.org/oss-sec/2015/q2/680
— Red Hat
The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4692?
CVE-2015-4692 is classified as a medium severity vulnerability.
How do I fix CVE-2015-4692?
To fix CVE-2015-4692, upgrade to a patched version of the Linux kernel that is 4.1.4 or later.
What systems are affected by CVE-2015-4692?
CVE-2015-4692 affects Linux kernel versions up to and including 4.1.3 built with KVM support.
Who can exploit CVE-2015-4692?
CVE-2015-4692 can be exploited by unprivileged users executing specific ioctl calls in KVM.
What type of vulnerability is CVE-2015-4692?
CVE-2015-4692 is a NULL pointer dereference vulnerability in the Linux kernel.