CVE-2009-4031
kernel: KVM: x86 emulator: limit instructions to 15 bytes
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
La función do_insn_fetch en arch/x86/kvm/emulate.c en el emulador x86 KVM en el subsystem del kernel de Linux anterior a 2.6.32-rc8-next-20091125 intenta interpretar instrucciones que contienen demasiados bytes para ser válidas, lo que permite a un usuario invitado del sistema operativo provocar una denegación de servicio (incremento de la latencia de la planificación) en el sistema operativo anfitrión a través de manipulaciones no especificadas relacionadas con el soporte SMP.
Various kernel related vulnerabilities have been addressed. It was discovered that FUSE did not correctly check certain requests. It was discovered that KVM did not correctly decode certain guest instructions. It was discovered that the OHCI fireware driver did not correctly handle certain ioctls. It was discovered that "print-fatal-signals" reporting could show arbitrary kernel memory contents.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2009-11-20 CVE Reserved
- 2009-11-27 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88 | X_refsource_confirm | |
| http://secunia.com/advisories/37720 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2009/11/25/1 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2009/11/25/3 | Mailing List |
|
| http://www.securityfocus.com/bid/37130 | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz | 2023-02-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | < 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.32" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc1 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc2 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc3 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc4 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc5 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc6 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.32 Search vendor "Linux" for product "Linux Kernel" and version "2.6.32" | rc7 |
Affected
| ||||||