← back
CVE-2012-0045

CVE-2012-0045

EPSS 1.0%
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/36545unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=773370https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14http://www.openwall.com/lists/oss-security/2012/01/12/2