CVE-2009-4031
- State
- Published
- Severity
- Not scored
- Published
- Nov 27, 2009
- Updated
- Aug 7, 2024
- Reserved
- Nov 20, 2009
Description
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20091125 Re: CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytesmailing-list
- 37720third-party-advisory
- SUSE-SA:2010:018vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz
- oval:org.mitre.oval:def:11089vdb-entrysignature
- [oss-security] 20091125 CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytesmailing-list
- FEDORA-2009-13098vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88
- 37130vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=541160
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.