REDHAT-BUG-1144835: Medium severity red hat linux vulnerability
On systems with invept instruction support (corresponding bit in IA32VMXEPTVPIDCAP MSR is set) guest invocation of invept causes vm exit, which is currently not handled and causes unknown exit error to be propagated to userspace.
A local unprivileged guest user could use this flaw to crash the guest.
Upstream fix:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bfd0a56b90005f8c8a004baf407ad90045c2b11e
Acknowledgements:
Red Hat would like to thank the Advanced Threat Research team at Intel Security for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1144835?
The severity of REDHAT-BUG-1144835 is categorized as high due to the potential for a local unprivileged guest user to crash the system.
How do I fix REDHAT-BUG-1144835?
To fix REDHAT-BUG-1144835, you should update your Red Hat Linux Kernel to the latest version that addresses this issue.
Which systems are affected by REDHAT-BUG-1144835?
Systems that support the invept instruction and have the corresponding bit in IA32_VMX_EPT_VPID_CAP MSR set are affected by REDHAT-BUG-1144835.
Can REDHAT-BUG-1144835 lead to data loss?
While REDHAT-BUG-1144835 primarily causes a system crash, it could potentially lead to data loss if unsaved work is present.
Is REDHAT-BUG-1144835 exploitable remotely?
No, REDHAT-BUG-1144835 requires local access by an unprivileged guest user to exploit the vulnerability.