REDHAT-BUG-1400495: High severity Linux KVM vulnerability

Published Dec 1, 2016

Updated

A DoS vulnerability in KVM on Power was found where a guest can cause a host CPU to hang, spinning in an infinite loop with interrupts disabled.

Upstream patch -------------- -> https://git.kernel.org/linus/ccec44563b18a0ce90e2d4f332784b3cb25c8e9c

External References: -> https://www-01.ibm.com/support/docview.wss?uid=isg3T1023969 -> http://www.securityfocus.com/bid/92123/info

Affected Software

1 affected component

Linux KVM

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ccec44563b18a0ce90e2d4f332784b3cb25c8e9c

Event History

Dec 1, 2016

Data Sourced

via Red Hat·11:37 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

Systems using KVM on Power are exposed. The issue allows a guest to affect the host CPU, so the relevant boundary is a Power host running KVM with potentially untrusted or disruptive guests.

What access does an attacker need to trigger the denial of service?

An attacker needs the ability to run code in a KVM guest. The guest can trigger a host CPU hang that spins indefinitely with interrupts disabled.

What is the operational impact if exploitation succeeds?

A host CPU can hang in an infinite loop while interrupts are disabled, resulting in a denial of service. The provided data does not indicate data disclosure or privilege escalation.

Is a fix available?

An upstream kernel patch is referenced by commit ccec44563b18a0ce90e2d4f332784b3cb25c8e9c. The provided data does not identify affected or fixed distribution package versions.

REDHAT-BUG-1400495: High severity Linux KVM vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What access does an attacker need to trigger the denial of service?

What is the operational impact if exploitation succeeds?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What access does an attacker need to trigger the denial of service?

What is the operational impact if exploitation succeeds?

Is a fix available?