CVE-2010-3698

Published: 26 November 2010

The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).

From the Ubuntu security team

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service.

Status

Notes

There is no KVM in Dapper, so that cannot be affected. Maverick needed
some adaption as a previous stable patch moved code around. Lucid had
it already. Karmic mostly cherry-pick. Hardy needed more twisting.

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3698
• https://ubuntu.com/security/notices/USN-1072-1
• https://ubuntu.com/security/notices/USN-1073-1
• https://ubuntu.com/security/notices/USN-1074-1
• https://ubuntu.com/security/notices/USN-1074-2
• https://ubuntu.com/security/notices/USN-1081-1
• https://ubuntu.com/security/notices/USN-1041-1
• https://ubuntu.com/security/notices/USN-1093-1
• https://ubuntu.com/security/notices/USN-1187-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=639879