CVE-2014-3610
Fixed in a distro release EPSS <1%
The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.
Products: linux_kernel, canonical ubuntu_linux, debian_linux, opensuse evergreen, suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.16.7-1 |
| Debian 13 | linux | 3.16.7-1 |
| Debian 14 | linux | 3.16.7-1 |
| Debian 7 | linux | 3.2.63-2+deb7u1 |
| Red Hat rhel virtualization 5 | kmod-kvm | 0:83-270.el5_11 |
| Red Hat rhel virtualization 5 | kmod-kvm-debug | 0:83-270.el5_11 |
| Red Hat rhel virtualization 5 | kvm | 0:83-270.el5_11 |
| Red Hat rhel virtualization 5 | kvm-debuginfo | 0:83-270.el5_11 |
| Red Hat rhel virtualization 5 | kvm-qemu-img | 0:83-270.el5_11 |
| Red Hat rhel virtualization 5 | kvm-tools | 0:83-270.el5_11 |
| Ubuntu 14.04 LTS | linux | 3.13.0-39.66 |