CVE-2015-7513: Divide by Zero
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions.
Other sources
Linux kernel built with the KVM virtualisation support(CONFIGKVM) is vulnerable to a divide by zero issue. It occurs in the KVM module's Programmable Interval Timer(PIT) emulation, when PIT counters for channel 1 or 2 are set to zero(0) and a privileged user inside guest attempts to read those.
A privileged guest user with access to PIT I/O ports, could use this issue to crash the host kernel resulting in DoS.
Upstream patch: --------------- -> https://git.kernel.org/linus/0185604c2d82c560dab2f2933a18f797e74ab5a8
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/01/07/2 -> http://wiki.osdev.org/ProgrammableIntervalTimer -> http://www.osdever.net/bkerndev/Docs/pit.htm
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2015-7513.
What is the severity level of CVE-2015-7513?
CVE-2015-7513 has a severity level of medium (4).
How does CVE-2015-7513 impact the Linux kernel?
CVE-2015-7513 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value.
Which versions of the Linux kernel are affected by CVE-2015-7513?
The Linux kernel versions before 4.4 are affected by CVE-2015-7513.
Are there any known solutions or remedies for CVE-2015-7513?
Yes, updating to Linux kernel version 4.4~ or later can mitigate CVE-2015-7513.