kvm-84-5AXS3

エラータID: AXSA:2009-381:01

Release date: 
Thursday, September 3, 2009 - 14:05
Subject: 
kvm-84-5AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

This package provides the kvm kernel modules built for the Linux kernel 2.6.18-128.8AXS3PAE for the i686 family of processors.
Fixed bugs:
CVE-2009-1242
The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka Long mode enable) bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
CVE-2009-2287
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.

Solution: 

Update packages.

CVEs: 
CVE-2009-1242
The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
CVE-2009-2287
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.
Additional Info: 

N/A

Download: 

SRPMS
  1. kvm-84-5AXS3.src.rpm
    MD5: 10470e9c21d64545e1c39d8c65f24c51
    SHA-256: 45b4d0c68b710460ad35d1412f05e43fde87252ca13e59b40b382f250114f9fe
    Size: 4.25 MB

Asianux Server 3 for x86
  1. kmod-kvm-84-5AXS3.i686.rpm
    MD5: 2967b8b113c9bf91499ee9dc9db21968
    SHA-256: 53abb64f0ae89f14e637deac46d639a694db43872cd352faf99f10f048a1f7af
    Size: 0.96 MB
  2. kmod-kvm-PAE-84-5AXS3.i686.rpm
    MD5: 903f1e77e5e3c2ae5772866cdf150d4e
    SHA-256: 252763b0d62202832a78b003b8616fd1a10c7b51bf6fdfb8da642e1aeaf66858
    Size: 0.96 MB

Asianux Server 3 for x86_64
  1. kmod-kvm-84-5AXS3.x86_64.rpm
    MD5: e225f0c8ed4d7a8d0c6188e5ba46345d
    SHA-256: 9d811995373e1d7223b3f2ce27280b319447e10f35a21e38395951e0bffee252
    Size: 0.98 MB