CVE-2014-3601

 

Published at: - 01-09-2014 03:55

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.

Common Vulnerability Scoring System (CVSS)

AV:A/AC:H/Au:S/C:N/I:N/A:C

 

Verification logic

 

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1131951
• https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
• USN-2358-1-Third Party Advisory
• USN-2359-1-Third Party Advisory
• USN-2357-1-Third Party Advisory
• USN-2356-1-Third Party Advisory
• SUSE-SU-2015:0481-Third Party Advisory
• openSUSE-SU-2015:0566-Third Party Advisory
• SUSE-SU-2015:0736-Third Party Advisory
• 69489-
• 60830-
• linux-kernel-cve20143601-dos(95689)-

 

Keywords

NVD

 

CVE-2014-3601

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures