1.9
CVE-2012-4461
- EPSS 0.36%
- Veröffentlicht 22.01.2013 23:55:02
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.6.8
Linux ≫ Linux Kernel Version3.6
Linux ≫ Linux Kernel Version3.6.1
Linux ≫ Linux Kernel Version3.6.2
Linux ≫ Linux Kernel Version3.6.3
Linux ≫ Linux Kernel Version3.6.4
Linux ≫ Linux Kernel Version3.6.5
Linux ≫ Linux Kernel Version3.6.6
Linux ≫ Linux Kernel Version3.6.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.273 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:N/I:N/A:P
|
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html
http://article.gmane.org/gmane.comp.emulators.kvm.devel/100742
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git%3Ba=commit%3Bh=6d1068b3a98519247d8ba4ec85cd40ac136dbdf9
http://rhn.redhat.com/errata/RHSA-2013-0223.html
http://rhn.redhat.com/errata/RHSA-2013-0882.html
http://secunia.com/advisories/51160
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9
http://www.openwall.com/lists/oss-security/2012/11/06/14
http://www.securityfocus.com/bid/56414
https://bugzilla.redhat.com/show_bug.cgi?id=862900