CVE-2015-7513
MEDIUM severity · CVSS 6.5 · CWE-369
6.5CVSS MEDIUM
Summary
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)1%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8 ↗
Additional information
- NVD record
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8Patch
- http://www.openwall.com/lists/oss-security/2016/01/07/2Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.htmlAdvisory
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.htmlAdvisory
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.htmlAdvisory
- http://www.debian.org/security/2016/dsa-3434Advisory
- http://www.securityfocus.com/bid/79901Advisory
- http://www.securitytracker.com/id/1034602Advisory