CVE-2014-8369
Fixed in a distro release EPSS <1%
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.
Products: linux_kernel, debian_linux, opensuse evergreen, suse linux_enterprise_real_time_extension, suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.16.7-ckt2-1 |
| Debian 13 | linux | 3.16.7-ckt2-1 |
| Debian 14 | linux | 3.16.7-ckt2-1 |
| Debian 7 | linux | 3.2.63-2+deb7u2 |
| Red Hat Enterprise Linux 6 | kernel | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-abi-whitelists | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-bootwrapper | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug-debuginfo | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug-devel | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-i686 | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-ppc64 | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-s390x | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-x86_64 | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-devel | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-doc | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-firmware | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-headers | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump-debuginfo | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump-devel | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | perf | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | perf-debuginfo | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | python-perf | 0:2.6.32-504.12.2.el6 |
| Red Hat Enterprise Linux 6 | python-perf-debuginfo | 0:2.6.32-504.12.2.el6 |
| Ubuntu 14.04 LTS | linux | 3.13.0-41.70 |
| Ubuntu 14.04 LTS | linux | 3.13.0-43.72 |
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-26.35~14.04.1 |
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-28.37~14.04.1 |