| CVE-2009-2287 | Date: (C)2009-07-01 (M)2024-02-22 |
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 4.9 |
| Exploit Score: 3.9 |
| Impact Score: 6.9 |
| |
| CVSS V2 Metrics: |
| Access Vector: LOCAL |
| Access Complexity: LOW |
| Authentication: NONE |
| Confidentiality: NONE |
| Integrity: NONE |
| Availability: COMPLETE |
| | |
