CVE-2017-1000252: Input Validation
A reachable assertion failure flaw was found in the Linux kernel built with KVM virtualisation(CONFIGKVM) support with Virtual Function I/O feature (CONFIGVFIO) enabled. This failure could occur if a malicious guest device sent a virtual interrupt (guest IRQ) with a larger (>1024) index value.
Other sources
A reachable assertion failure flaw was found in the Linux kernel built with the KVM virtualisation(CONFIGKVM) support with Virtual Function I/O feature (CONFIGVFIO) enabled. This could occur if a malicious guest device sent a virtual interrupt(guest IRQ) with larger(>1024) index value.
A guest user/process could use this flaw to crash the KVM hypervisor resulting in Dos.
Note: It affects x86 arch platforms.
Upstream patches: ----------------- -> https://marc.info/?l=kvm&m=150549145711115&w=2 -> https://marc.info/?l=kvm&m=150549146311117&w=2
Introduced by commit: -> https://git.kernel.org/linus/efc644048ecde54f016011fe10110addd0de348f
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/09/15/4
— Red Hat
The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guestirq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2017-1000252?
CVE-2017-1000252 has a severity level of medium due to the potential for exploitation by a malicious guest device.
How do I fix CVE-2017-1000252?
To fix CVE-2017-1000252, upgrade your kernel to one of the patched versions specifically mentioned in the advisory.
What versions are affected by CVE-2017-1000252?
CVE-2017-1000252 affects Linux kernel versions prior to 4.13.3 that are built with KVM virtualization and VFIO enabled.
Can CVE-2017-1000252 lead to a denial of service?
Yes, CVE-2017-1000252 can result in a denial of service condition due to an assertion failure.
What configurations are susceptible to CVE-2017-1000252?
Configurations that have KVM virtualization and Virtual Function I/O (VFIO) feature enabled are susceptible to CVE-2017-1000252.