[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20150621022359.D769B72E0D1@smtpvbsrv1.mitre.org>
Date: Sat, 20 Jun 2015 22:23:59 -0400 (EDT)
From: cve-assign@...re.org
To: pmatouse@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request -- Linux kernel - kvm: x86: NULL pointer dereference in kvm_apic_has_events function
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> https://lkml.org/lkml/2015/6/4/163
> A local user with access to /dev/kvm (usually unprivileged) can use this
> flaw to crash the system.
> arch/x86/kvm/lapic.h
>
> kvm_apic_has_events
>
> - return vcpu->arch.apic->pending_events;
> + return kvm_vcpu_has_lapic(vcpu) && vcpu->arch.apic->pending_events;
(not yet available at
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/arch/x86/kvm/lapic.h)
Use CVE-2015-4692.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJVhh/YAAoJEKllVAevmvmsp/8H/ilk6zFEDd0eldBYV2vjqiiN
gygbpivWA6/zn93pbMDCHAGhLrqxpOWdnPKBiDmsk3zu2tO7dwgWD9gSwTbTd00I
9Ecd8kIW1VtqDEGr/1xH478NipY4RAFJYaM/h8kpGw+XI7bvuvHD9ykr9ZRFNkaV
rzfRbtq4JvwfqMX6eAIId62zOexlhvsbzqUxrRdTSlT7CMH8Th/BKYx+X7LTwJMy
dvoZ3KneJyjCoYzd8LMCWNiuf5xQa8GuNObMA50FYGUWDhs5/Dy4uCnA52FooR9a
79agu9zQowTupO+v3eENp0u2iid82vFdVrnSEeXLfT+sKOhpUvMify7VwstBPc8=
=STEK
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
