Total vulnerabilities in the database
The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 3.17.2 |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 10.04 | 10.04.x |
| debian / debian_linux | 7.0 | 7.0.x |
| opensuse / evergreen | 11.4 | 11.4.x |
| suse / suse_linux_enterprise_server | 11-sp2 | 11-sp2.x |