CVE-2011-4347

Priority
Low
Description
It was found that kvm_vm_ioctl_assign_device function did not check if
the user requesting assignment was privileged or not. Together with
/dev/kvm being 666, unprivileged user could assign unused pci devices,
or even devices that were in use and whose resources were not properly
claimed by the respective drivers.
Please note that privileged access was still needed to re-program the
device to for example issue DMA requests. This is typically achieved by
touching files on sysfs filesystem. These files are usually not
accessible to unprivileged users.
As a result, local user could use this flaw to crash the system.
Ubuntu-Description
Sasha Levin discovered a flaw in the permission checking for device
assignments requested via the kvm ioctl in the Linux kernel. A local user
could use this flaw to crash the system causing a denial of service.
References
Bugs
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (3.2.0-1600.1)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.2.0-1602.5)
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-345.47)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-18.31~lucid1)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.38-14.58~lucid1)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):not-affected (no KVM on ARM)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.35-32.68~lucid1)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):not-affected
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-41.88)
Ubuntu 11.04 (Natty Narwhal):released (2.6.38-14.58)
Ubuntu 11.10 (Oneiric Ocelot):released (3.0.0-18.31)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (3.2.0-8.14)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.2.0-8.14)
Patches:
Introduced by 4d5c5d0fe89c921336b95f5e7e4f529a9df92f53Fixed by 3d27e23b17010c668db311140b17bbbb70c78fb9
Introduced by 4d5c5d0fe89c921336b95f5e7e4f529a9df92f53Fixed by 423873736b78f549fbfa2f715f2e4de7e6c5e1e9
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):not-affected (no KVM on ARM)
Ubuntu 11.10 (Oneiric Ocelot):not-affected (no KVM on ARM)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (no KVM on ARM)
Ubuntu 12.10 (Quantal Quetzal):not-affected (no KVM on ARM)
Package
Upstream:released (3.2)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):not-affected (no KVM on ARM)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2012-08-23 00:14:23 UTC (commit 5660)