Published: 28/11/2016 Updated: 12/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel prior to 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Several security issues were fixed in the kernel ...

Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM) support is vulnerable to a null pointer dereference flaw It could occur on x86 platform, when emulating an undefined instruction An attacker could use this flaw to crash the host kernel resulting in DoS ...

CWE-284 CWE-476 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7 https://github.com/torvalds/linux/commit/d9092f52d7e61dd1557f2db2400ddb430e85937e http://www.openwall.com/lists/oss-security/2016/11/22/3 https://bugzilla.redhat.com/show_bug.cgi?id=1393350 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d9092f52d7e61dd1557f2db2400ddb430e85937e http://www.securityfocus.com/bid/94459 http://rhn.redhat.com/errata/RHSA-2017-0387.html http://rhn.redhat.com/errata/RHSA-2017-0386.html https://access.redhat.com/errata/RHSA-2017:0387 https://nvd.nist.gov https://usn.ubuntu.com/3161-2/

CVE-2016-8630

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect