CVE-2016-8630: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernel built with the Kernel-based Virtual Machine (CONFIGKVM) support is vulnerable to a null pointer dereference flaw. It could occur on x86 platform, when emulating an undefined instruction.
A user/process could use this flaw to crash the host kernel resulting in DoS.
Upstream patch: --------------- -> https://git.kernel.org/linus/d9092f52d7e61dd1557f2db2400ddb430e85937e
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/11/22/3
— Red Hat
The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2016-8630.
What is the severity level of CVE-2016-8630?
CVE-2016-8630 has a severity level of high (7).
How does CVE-2016-8630 affect the Linux kernel?
CVE-2016-8630 affects the x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before version 4.8.7, when KVM is enabled.
What is the impact of CVE-2016-8630?
CVE-2016-8630 allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.
How can I fix CVE-2016-8630?
To fix CVE-2016-8630, you should update to Linux kernel version 4.8.7 or later.