REDHAT-BUG-862900: Medium severity red hat linux vulnerability
A flaw has been found in the way Linux kernel's KVM subsystem handled vcpu->arch.cr4 X86CR4OSXSAVE bit set upon guest enter. On hosts without the XSAVE feature an unprivileged local user could use this flaw to crash the system.
Acknowledgements:
Red Hat would like to thank Jon Howell for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-862900?
The severity of REDHAT-BUG-862900 is considered critical due to the potential for unprivileged local users to crash the system.
How do I fix REDHAT-BUG-862900?
To fix REDHAT-BUG-862900, you should apply the latest kernel update provided by Red Hat.
Which systems are affected by REDHAT-BUG-862900?
REDHAT-BUG-862900 affects systems running the Red Hat Linux kernel without the XSAVE feature.
What is the cause of REDHAT-BUG-862900?
REDHAT-BUG-862900 is caused by a flaw in the KVM subsystem's handling of the vcpu->arch.cr4 X86_CR4_OSXSAVE bit upon guest entry.
Can this vulnerability be exploited remotely?
No, REDHAT-BUG-862900 cannot be exploited remotely as it requires local access to the system.