CVE Vulnerabilities

CVE-2017-8106

NULL Pointer Dereference

Published: Apr 24, 2017 | Modified: May 05, 2017
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 3.12 (including) 3.12 (including)
Linux_kernel Linux 3.12.1 (including) 3.12.1 (including)
Linux_kernel Linux 3.12.2 (including) 3.12.2 (including)
Linux_kernel Linux 3.12.3 (including) 3.12.3 (including)
Linux_kernel Linux 3.12.4 (including) 3.12.4 (including)
Linux_kernel Linux 3.12.5 (including) 3.12.5 (including)
Linux_kernel Linux 3.12.6 (including) 3.12.6 (including)
Linux_kernel Linux 3.12.7 (including) 3.12.7 (including)
Linux_kernel Linux 3.12.8 (including) 3.12.8 (including)
Linux_kernel Linux 3.12.9 (including) 3.12.9 (including)
Linux_kernel Linux 3.12.10 (including) 3.12.10 (including)
Linux_kernel Linux 3.12.11 (including) 3.12.11 (including)
Linux_kernel Linux 3.12.12 (including) 3.12.12 (including)
Linux_kernel Linux 3.12.13 (including) 3.12.13 (including)
Linux_kernel Linux 3.12.14 (including) 3.12.14 (including)
Linux_kernel Linux 3.12.15 (including) 3.12.15 (including)
Linux_kernel Linux 3.12.16 (including) 3.12.16 (including)
Linux_kernel Linux 3.12.17 (including) 3.12.17 (including)
Linux_kernel Linux 3.12.18 (including) 3.12.18 (including)
Linux_kernel Linux 3.12.19 (including) 3.12.19 (including)
Linux_kernel Linux 3.12.20 (including) 3.12.20 (including)
Linux_kernel Linux 3.12.21 (including) 3.12.21 (including)
Linux_kernel Linux 3.12.22 (including) 3.12.22 (including)
Linux_kernel Linux 3.12.23 (including) 3.12.23 (including)
Linux_kernel Linux 3.12.24 (including) 3.12.24 (including)
Linux_kernel Linux 3.12.25 (including) 3.12.25 (including)
Linux_kernel Linux 3.12.26 (including) 3.12.26 (including)
Linux_kernel Linux 3.12.27 (including) 3.12.27 (including)
Linux_kernel Linux 3.12.28 (including) 3.12.28 (including)
Linux_kernel Linux 3.12.29 (including) 3.12.29 (including)
Linux_kernel Linux 3.12.30 (including) 3.12.30 (including)
Linux_kernel Linux 3.12.31 (including) 3.12.31 (including)
Linux_kernel Linux 3.12.32 (including) 3.12.32 (including)
Linux_kernel Linux 3.12.33 (including) 3.12.33 (including)
Linux_kernel Linux 3.12.34 (including) 3.12.34 (including)
Linux_kernel Linux 3.12.35 (including) 3.12.35 (including)
Linux_kernel Linux 3.12.36 (including) 3.12.36 (including)
Linux_kernel Linux 3.12.37 (including) 3.12.37 (including)
Linux_kernel Linux 3.12.38 (including) 3.12.38 (including)
Linux_kernel Linux 3.12.39 (including) 3.12.39 (including)
Linux_kernel Linux 3.12.40 (including) 3.12.40 (including)
Linux_kernel Linux 3.12.41 (including) 3.12.41 (including)
Linux_kernel Linux 3.12.42 (including) 3.12.42 (including)
Linux_kernel Linux 3.12.43 (including) 3.12.43 (including)
Linux_kernel Linux 3.12.44 (including) 3.12.44 (including)
Linux_kernel Linux 3.12.45 (including) 3.12.45 (including)
Linux_kernel Linux 3.12.46 (including) 3.12.46 (including)
Linux_kernel Linux 3.12.47 (including) 3.12.47 (including)
Linux_kernel Linux 3.12.48 (including) 3.12.48 (including)
Linux_kernel Linux 3.12.49 (including) 3.12.49 (including)
Linux_kernel Linux 3.12.50 (including) 3.12.50 (including)
Linux_kernel Linux 3.12.51 (including) 3.12.51 (including)
Linux_kernel Linux 3.12.52 (including) 3.12.52 (including)
Linux_kernel Linux 3.12.53 (including) 3.12.53 (including)
Linux_kernel Linux 3.12.54 (including) 3.12.54 (including)
Linux_kernel Linux 3.12.55 (including) 3.12.55 (including)
Linux_kernel Linux 3.12.56 (including) 3.12.56 (including)
Linux_kernel Linux 3.12.57 (including) 3.12.57 (including)
Linux_kernel Linux 3.12.58 (including) 3.12.58 (including)
Linux_kernel Linux 3.12.59 (including) 3.12.59 (including)
Linux_kernel Linux 3.13 (including) 3.13 (including)
Linux_kernel Linux 3.14.67 (including) 3.14.67 (including)
Linux_kernel Linux 3.14.68 (including) 3.14.68 (including)
Linux_kernel Linux 3.15 (including) 3.15 (including)

Potential Mitigations

References