CVE-2012-4461
The MITRE CVE dictionary describes this issue as:
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
Find out more about CVE-2012-4461 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5.
This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.
This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise MRG 2.
CVSS v2 metrics
| Base Score | 4.7 |
|---|---|
| Base Metrics | AV:L/AC:M/Au:N/C:N/I:N/A:C |
| Access Vector | Local |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Complete |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux Extended Update Support 6.2 (kernel) | RHSA-2013:0882 | 2013-05-30 |
| Red Hat Enterprise Linux 6 (kernel) | RHSA-2013:0223 | 2013-02-05 |
Affected Packages State
| Platform | Package | State |
|---|---|---|
| Red Hat Enterprise MRG 2 | realtime-kernel | Not affected |
| Red Hat Enterprise Linux 5 | kvm | Not affected |
Acknowledgements
Red Hat would like to thank Jon Howell for reporting this issue.CVE description copyright © 2017, The MITRE Corporation