Published: 10/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel prior to 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
opensuse evergreen 11.4
suse linux enterprise real time extension 11
novell suse linux enterprise server 12.0
novell suse linux enterprise desktop 12.0
suse linux enterprise workstation extension 12
suse linux enterprise software development kit 12
novell suse linux enterprise server 11
redhat enterprise linux 5.0
debian debian linux 7.0
canonical ubuntu linux 14.10
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04

Several security issues were fixed in the kernel ...

It was found that the Linux kernel's KVM implementation did not ensure that the host CR4 control register value remained unchanged across VM entries on the same virtual CPU A local, unprivileged user could use this flaw to cause a denial of service on the system ...

CWE-400 https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a http://www.openwall.com/lists/oss-security/2014/10/21/4 https://bugzilla.redhat.com/show_bug.cgi?id=1153322 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2 http://www.openwall.com/lists/oss-security/2014/10/29/7 http://www.ubuntu.com/usn/USN-2421-1 http://www.ubuntu.com/usn/USN-2419-1 http://www.ubuntu.com/usn/USN-2420-1 http://www.ubuntu.com/usn/USN-2418-1 http://www.ubuntu.com/usn/USN-2417-1 http://www.debian.org/security/2014/dsa-3060 http://www.securityfocus.com/bid/70691 http://secunia.com/advisories/60174 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://rhn.redhat.com/errata/RHSA-2015-0290.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://rhn.redhat.com/errata/RHSA-2015-0782.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://rhn.redhat.com/errata/RHSA-2015-0864.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a https://nvd.nist.gov https://usn.ubuntu.com/2421-1/

CVE-2014-3690

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect