kernel: denial of service [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2012-4461

Created:

November 22, 2012

Updated:

November 28, 2012

Description:

From the Red Hat Bugzilla entry:

A flaw has been found in the way Linux kernel's KVM subsystem handled vcpu->arch.cr4 X86_CR4_OSXSAVE bit set upon guest enter. On hosts without the XSAVE feature an unprivileged local user could use this flaw to crash the system.

Alerts:

Fedora	FEDORA-2012-18684	2012-11-22
Fedora	FEDORA-2012-18691	2012-11-28
Ubuntu	USN-1688-1	2013-01-15
Ubuntu	USN-1689-1	2013-01-15
Mageia	MGASA-2013-0010	2013-01-18
Mageia	MGASA-2013-0009	2013-01-18
Mageia	MGASA-2013-0011	2013-01-18
Mageia	MGASA-2013-0012	2013-01-18
Ubuntu	USN-1696-1	2013-01-17
Ubuntu	USN-1699-1	2013-01-17
Ubuntu	USN-1704-1	2013-01-22
Mageia	MGASA-2013-0016	2013-01-24
Ubuntu	USN-1699-2	2013-02-01
Ubuntu	USN-1696-2	2013-02-01
Ubuntu	USN-1704-2	2013-02-01
Red Hat	RHSA-2013:0223-01	2013-02-05
CentOS	CESA-2013:0223	2013-02-06
Oracle	ELSA-2013-0223	2013-02-06
Scientific Linux	SL-kern-20130206	2013-02-06
Oracle	ELSA-2013-2503	2013-02-07
Oracle	ELSA-2013-2507	2013-02-28

(Log in to post comments)