News
Vigil@nce - Linux kernel: denial of service via QEMU/KVM emulation
October 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can use several vulnerabilities of KVM/QEMU, in order
to trigger an host kernel panic.
Impacted products: Linux
Severity: 1/4
Creation date: 24/10/2014
DESCRIPTION OF THE VULNERABILITY
The KVM Linux module notably allows to emulate an amd64 box even
if the host architecture is not compatible.
An attacker who controls an amd64 virtual machine can use
instruction that uses RIP (instruction pointer register) based
addressing, in order to trigger a denial of service.
[severity:1/4; CVE-2014-8480]
An attacker who controls an amd64 virtual machine can use SSE
instruction with special format like CLFLUSH or PREFETCH, in order
to trigger a denial of service. [severity:1/4; CVE-2014-8481]
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-QEMU-KVM-emulation-15539
