CVE-2017-1000407: High severity red hat virtualization host eus vulnerability
Last updated 29 November 2024
Other sources
Linux kernel built with the KVM virtualization(CONFIGKVM) support for the Intel processor family(CONFIGKVMINTEL), is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests.
A guest user could use this flaw to crash the host kernel resulting in DoS.
Upstream patch -------------- -> https://www.spinics.net/lists/kvm/msg159809.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/12/04/2
— Red Hat
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000407?
CVE-2017-1000407 is considered to have a high severity due to its potential to cause a denial of service.
How do I fix CVE-2017-1000407?
To fix CVE-2017-1000407, it is recommended to upgrade to patched kernel versions including 5.10.223-1 or later.
Which systems are affected by CVE-2017-1000407?
CVE-2017-1000407 affects various Linux distributions including Red Hat Enterprise Linux, Debian, and Ubuntu systems.
What type of attack does CVE-2017-1000407 involve?
CVE-2017-1000407 involves a denial of service attack that floods an I/O port with write requests.
When was CVE-2017-1000407 reported?
CVE-2017-1000407 was reported on December 4, 2017.