CVE-2012-0045
Priority
Medium
Description
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation
in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka
syscall) opcode, which allows guest OS users to cause a denial of service
(guest OS crash) via a crafted application, as demonstrated by an NASM
file.
in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka
syscall) opcode, which allows guest OS users to cause a denial of service
(guest OS crash) via a crafted application, as demonstrated by an NASM
file.
Ubuntu-Description
Stephan Bärwolf discovered a flaw in the KVM (kernel-based virtual machine)
subsystem of the Linux kernel. A local unprivileged user can crash use this
flaw to crash VMs causing a deny of service.
subsystem of the Linux kernel. A local unprivileged user can crash use this
flaw to crash VMs causing a deny of service.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0045
http://www.openwall.com/lists/oss-security/2012/01/11/4
https://lkml.org/lkml/2011/12/28/170
http://www.spinics.net/lists/kvm/msg66633.html
http://www.ubuntu.com/usn/usn-1407-1
http://www.ubuntu.com/usn/usn-1405-1
http://www.ubuntu.com/usn/usn-1406-1
http://www.ubuntu.com/usn/usn-1421-1
http://www.ubuntu.com/usn/usn-1422-1
http://www.ubuntu.com/usn/usn-1425-1
http://www.ubuntu.com/usn/usn-1426-1
http://www.ubuntu.com/usn/usn-1431-1
http://www.ubuntu.com/usn/usn-1433-1
http://www.ubuntu.com/usn/usn-1440-1
http://www.openwall.com/lists/oss-security/2012/01/11/4
https://lkml.org/lkml/2011/12/28/170
http://www.spinics.net/lists/kvm/msg66633.html
http://www.ubuntu.com/usn/usn-1407-1
http://www.ubuntu.com/usn/usn-1405-1
http://www.ubuntu.com/usn/usn-1406-1
http://www.ubuntu.com/usn/usn-1421-1
http://www.ubuntu.com/usn/usn-1422-1
http://www.ubuntu.com/usn/usn-1425-1
http://www.ubuntu.com/usn/usn-1426-1
http://www.ubuntu.com/usn/usn-1431-1
http://www.ubuntu.com/usn/usn-1433-1
http://www.ubuntu.com/usn/usn-1440-1
Notes
apw> introduced by: e66bb2ccdcf76d032bbb464b35c292bb3ee58f9b
apw> current patches appear to be on github but not approved and merged:
apw> https://github.com/baerwolf/linux-stephan/commit/a5fad9d83c19a4af9f41b48d78eb1688c8289c7e
apw> now upstream (see below)
apw> current patches appear to be on github but not approved and merged:
apw> https://github.com/baerwolf/linux-stephan/commit/a5fad9d83c19a4af9f41b48d78eb1688c8289c7e
apw> now upstream (see below)
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-1601.4) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1601.4) |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-345.47) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-18.31~lucid1) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.38-14.58~lucid1) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.35-32.68~lucid1) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | not-affected |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-41.88) |
| Ubuntu 11.04 (Natty Narwhal): | released (2.6.38-14.58) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (3.0.0-18.31) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-19.30) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-19.30) |
Patches:
| Introduced by e66bb2ccdcf76d032bbb464b35c292bb3ee58f9b | Fixed by bdb42f5afebe208eae90406959383856ae2caf2b |
| Introduced by e66bb2ccdcf76d032bbb464b35c292bb3ee58f9b | Fixed by c2226fc9e87ba3da060e47333657cd6616652b84 |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | not-affected |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected |
Package
| Upstream: | released (3.3~rc3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |