CVE-2014-8369

Published: 10 November 2014

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.

From the Ubuntu Security Team

The KVM (kernel virtual machine) subsystem of the Linux kernel miscalculates the number of memory pages during the handling of a mapping failure. A guest OS user could exploit this to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Priority

Medium

CVSS 3 base score: 7.8

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8369
• https://lkml.org/lkml/2014/10/24/460
• https://ubuntu.com/security/notices/USN-2445-1
• https://ubuntu.com/security/notices/USN-2446-1
• https://ubuntu.com/security/notices/USN-2447-1
• https://ubuntu.com/security/notices/USN-2448-1
• https://ubuntu.com/security/notices/USN-2464-1
• https://ubuntu.com/security/notices/USN-2463-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1386395