Published: 10/11/2014 Updated: 07/11/2023

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 410

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel up to and including 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 7.0
opensuse evergreen 11.4
suse linux enterprise real time extension 11
suse suse linux enterprise server 11

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-7841 Liu Wei of Red Hat discovered that a SCTP server doing ASCONF will panic on malformed INIT chunks by triggering a NULL pointer dereference CVE-2014-8369 A flaw was discovered in the way iommu ...

Several security issues were fixed in the kernel ...

USN-2448-1 introduced a regression in the Linux kernel ...

USN-2447-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

It was found that the fix for CVE-2014-3601 was incomplete: the Linux kernel's kvm_iommu_map_pages() function still handled IOMMU mapping failures incorrectly A privileged user in a guest with an assigned host device could use this flaw to crash the host ...

CWE-119 https://bugzilla.redhat.com/show_bug.cgi?id=1156518 http://www.openwall.com/lists/oss-security/2014/10/24/7 https://lkml.org/lkml/2014/10/24/460 https://github.com/torvalds/linux/commit/3d32e4dbe71374a6780eaf51d719d76f9a9bf22f http://secunia.com/advisories/62326 http://www.securityfocus.com/bid/70749 http://secunia.com/advisories/62336 http://www.debian.org/security/2014/dsa-3093 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://rhn.redhat.com/errata/RHSA-2015-0674.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://www.securityfocus.com/bid/70747 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d32e4dbe71374a6780eaf51d719d76f9a9bf22f https://nvd.nist.gov https://www.debian.org/security/./dsa-3093 https://usn.ubuntu.com/2463-1/

CVE-2014-8369

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect