Your submission was sent successfully! Close

CVE-2011-4347

Published: 25 November 2011

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation. Please note that privileged access was still needed to re-program the device to for example issue DMA requests. This is typically achieved by touching files on sysfs filesystem. These files are usually not accessible to unprivileged users. As a result, local user could use this flaw to crash the system.

From the Ubuntu security team

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service.

Priority

Low

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-armadaxp
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-aws
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-ec2
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-flo
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-fsl-imx51
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-gke
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-goldfish
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-grouper
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-hwe
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-hwe-edge
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-backport-maverick
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-backport-natty
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-backport-oneiric
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-trusty
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-utopic
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-vivid
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-wily
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-lts-xenial
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-maguro
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-mako
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-manta
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-mvl-dove
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-raspi2
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-snapdragon
Launchpad, Ubuntu, Debian
upstream
Released (3.2)
linux-ti-omap4
Launchpad, Ubuntu, Debian
upstream
Released (3.2)