Vulnerability Description
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 2.6.36 |
| Fedoraproject | Fedora | 13 |
Related Weaknesses (CWE)
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.hThird Party Advisory
- http://secunia.com/advisories/42745Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:029Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0842.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0898.htmlThird Party Advisory
- http://www.securityfocus.com/bid/44500Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2010/3123Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3321Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=639879Issue TrackingThird Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.hThird Party Advisory
- http://secunia.com/advisories/42745Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36Broken Link
FAQ
What is CVE-2010-3698?
CVE-2010-3698 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN...
How severe is CVE-2010-3698?
CVE-2010-3698 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3698?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Fedoraproject Fedora.