CVE-2016-9777

Published: 28 December 2016

KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.

From the Ubuntu security team

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel did not properly restrict the VCPU index when I/O APIC is enabled, An attacker in a guest VM could use this to cause a denial of service (system crash) or possibly gain privileges in the host OS.

Priority

Medium

CVSS 3 base score: 7.8

Status

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9777
• https://bugzilla.redhat.com/show_bug.cgi?id=1400804
• http://www.openwall.com/lists/oss-security/2016/12/02/2
• https://usn.ubuntu.com/usn/usn-3190-1
• https://usn.ubuntu.com/usn/usn-3190-2
• NVD
• Launchpad
• Debian