[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 29 Mar 2012 21:58:36 +0200
From: Petr Matousek <pmatouse@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request -- kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic
inconsistency
If some vcpus are created before KVM_CREATE_IRQCHIP, then
irqchip_in_kernel() and vcpu->arch.apic will be inconsistent, leading to
potential NULL pointer dereferences.
A unprivileged local user could use this flaw to crash the system.
Upstream fix:
http://git.kernel.org/?p=virt/kvm/kvm.git;a=commit;h=5b40572ed5f0344b9dbee486a17c589ce1abe1a3
References:
http://comments.gmane.org/gmane.comp.emulators.kvm.devel/86217
https://bugzilla.redhat.com/show_bug.cgi?id=808199
Thanks,
--
Petr Matousek / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
