CVE

Id
40725  
CVE No.
CVE-2009-3290  
Status
Candidate  
Description
The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."  
Phase
Assigned (20090922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446678 40725 CVE-2009-3290 MLIST:[oss-security] 20090918 CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0  View
446679 40725 CVE-2009-3290 URL:http://www.openwall.com/lists/oss-security/2009/09/18/1  View
446680 40725 CVE-2009-3290 MLIST:[oss-security] 20090921 Re: CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0  View
446681 40725 CVE-2009-3290 URL:http://www.openwall.com/lists/oss-security/2009/09/21/1  View
446682 40725 CVE-2009-3290 MLIST:[oss-security] 20090922 Re: CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0  View
446683 40725 CVE-2009-3290 URL:http://www.openwall.com/lists/oss-security/2009/09/22/8  View
446684 40725 CVE-2009-3290 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=07708c4af1346ab1521b26a202f438366b7bcffd  View
446685 40725 CVE-2009-3290 CONFIRM:http://patchwork.kernel.org/patch/38926/  View
446686 40725 CVE-2009-3290 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=524124  View
446687 40725 CVE-2009-3290 REDHAT:RHSA-2009:1465  View
446688 40725 CVE-2009-3290 URL:http://www.redhat.com/support/errata/RHSA-2009-1465.html  View
446689 40725 CVE-2009-3290 UBUNTU:USN-852-1  View
446690 40725 CVE-2009-3290 URL:http://www.ubuntu.com/usn/USN-852-1  View
446691 40725 CVE-2009-3290 OVAL:oval:org.mitre.oval:def:11328  View
446692 40725 CVE-2009-3290 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11328  View
446693 40725 CVE-2009-3290 SECUNIA:37105  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41173 JVNDB-2009-002180 PHP の popen API 関数におけるサービス運用妨害 (DoS) の脆弱性 特定の Windows OS で稼働している PHP の popen API 関数には、第 2 引数内の "e" または "er" 文字の処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-3294 40725 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002180.html  View