CVE-2009-3638

EUVD-2009-3613
Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 2.6.31.3
linuxlinux_kernel
2.6.0
linuxlinux_kernel
2.6.1
linuxlinux_kernel
2.6.2
linuxlinux_kernel
2.6.3
linuxlinux_kernel
2.6.4
linuxlinux_kernel
2.6.5
linuxlinux_kernel
2.6.6
linuxlinux_kernel
2.6.7
linuxlinux_kernel
2.6.8
linuxlinux_kernel
2.6.8.1
linuxlinux_kernel
2.6.9
linuxlinux_kernel
2.6.10
linuxlinux_kernel
2.6.11
linuxlinux_kernel
2.6.11.1
linuxlinux_kernel
2.6.11.2
linuxlinux_kernel
2.6.11.3
linuxlinux_kernel
2.6.11.4
linuxlinux_kernel
2.6.11.5
linuxlinux_kernel
2.6.11.6
linuxlinux_kernel
2.6.11.7
linuxlinux_kernel
2.6.11.8
linuxlinux_kernel
2.6.11.9
linuxlinux_kernel
2.6.11.10
linuxlinux_kernel
2.6.11.11
linuxlinux_kernel
2.6.11.12
linuxlinux_kernel
2.6.12
linuxlinux_kernel
2.6.12.1
linuxlinux_kernel
2.6.12.2
linuxlinux_kernel
2.6.12.3
linuxlinux_kernel
2.6.12.4
linuxlinux_kernel
2.6.12.5
linuxlinux_kernel
2.6.12.6
linuxlinux_kernel
2.6.13
linuxlinux_kernel
2.6.13.1
linuxlinux_kernel
2.6.13.2
linuxlinux_kernel
2.6.13.3
linuxlinux_kernel
2.6.13.4
linuxlinux_kernel
2.6.13.5
linuxlinux_kernel
2.6.14
linuxlinux_kernel
2.6.14.1
linuxlinux_kernel
2.6.14.2
linuxlinux_kernel
2.6.14.3
linuxlinux_kernel
2.6.14.4
linuxlinux_kernel
2.6.14.5
linuxlinux_kernel
2.6.14.6
linuxlinux_kernel
2.6.14.7
linuxlinux_kernel
2.6.15
linuxlinux_kernel
2.6.15.1
linuxlinux_kernel
2.6.15.2
linuxlinux_kernel
2.6.15.3
linuxlinux_kernel
2.6.15.4
linuxlinux_kernel
2.6.15.5
linuxlinux_kernel
2.6.15.6
linuxlinux_kernel
2.6.15.7
linuxlinux_kernel
2.6.16
linuxlinux_kernel
2.6.16.1
linuxlinux_kernel
2.6.16.2
linuxlinux_kernel
2.6.16.3
linuxlinux_kernel
2.6.16.4
linuxlinux_kernel
2.6.16.5
linuxlinux_kernel
2.6.16.6
linuxlinux_kernel
2.6.16.7
linuxlinux_kernel
2.6.16.8
linuxlinux_kernel
2.6.16.9
linuxlinux_kernel
2.6.16.10
linuxlinux_kernel
2.6.16.11
linuxlinux_kernel
2.6.16.12
linuxlinux_kernel
2.6.16.13
linuxlinux_kernel
2.6.16.14
linuxlinux_kernel
2.6.16.15
linuxlinux_kernel
2.6.16.16
linuxlinux_kernel
2.6.16.17
linuxlinux_kernel
2.6.16.18
linuxlinux_kernel
2.6.16.19
linuxlinux_kernel
2.6.16.20
linuxlinux_kernel
2.6.16.21
linuxlinux_kernel
2.6.16.22
linuxlinux_kernel
2.6.16.23
linuxlinux_kernel
2.6.16.24
linuxlinux_kernel
2.6.16.25
linuxlinux_kernel
2.6.16.26
linuxlinux_kernel
2.6.16.27
linuxlinux_kernel
2.6.16.28
linuxlinux_kernel
2.6.16.29
linuxlinux_kernel
2.6.16.30
linuxlinux_kernel
2.6.16.31
linuxlinux_kernel
2.6.16.32
linuxlinux_kernel
2.6.16.33
linuxlinux_kernel
2.6.16.34
linuxlinux_kernel
2.6.16.35
linuxlinux_kernel
2.6.16.36
linuxlinux_kernel
2.6.16.37
linuxlinux_kernel
2.6.16.38
linuxlinux_kernel
2.6.16.39
linuxlinux_kernel
2.6.16.40
linuxlinux_kernel
2.6.16.41
linuxlinux_kernel
2.6.16.42
linuxlinux_kernel
2.6.16.43
linuxlinux_kernel
2.6.16.44
linuxlinux_kernel
2.6.16.45
linuxlinux_kernel
2.6.16.46
linuxlinux_kernel
2.6.16.47
linuxlinux_kernel
2.6.16.48
linuxlinux_kernel
2.6.16.49
linuxlinux_kernel
2.6.16.50
linuxlinux_kernel
2.6.16.51
linuxlinux_kernel
2.6.16.52
linuxlinux_kernel
2.6.16.53
linuxlinux_kernel
2.6.16.54
linuxlinux_kernel
2.6.16.55
linuxlinux_kernel
2.6.16.56
linuxlinux_kernel
2.6.16.57
linuxlinux_kernel
2.6.16.58
linuxlinux_kernel
2.6.16.59
linuxlinux_kernel
2.6.16.60
linuxlinux_kernel
2.6.16.61
linuxlinux_kernel
2.6.16.62
linuxlinux_kernel
2.6.17
linuxlinux_kernel
2.6.17.1
linuxlinux_kernel
2.6.17.2
linuxlinux_kernel
2.6.17.3
linuxlinux_kernel
2.6.17.4
linuxlinux_kernel
2.6.17.5
linuxlinux_kernel
2.6.17.6
linuxlinux_kernel
2.6.17.7
linuxlinux_kernel
2.6.17.8
linuxlinux_kernel
2.6.17.9
linuxlinux_kernel
2.6.17.10
linuxlinux_kernel
2.6.17.11
linuxlinux_kernel
2.6.17.12
linuxlinux_kernel
2.6.17.13
linuxlinux_kernel
2.6.17.14
linuxlinux_kernel
2.6.18
linuxlinux_kernel
2.6.18.1
linuxlinux_kernel
2.6.18.2
linuxlinux_kernel
2.6.18.3
linuxlinux_kernel
2.6.18.4
linuxlinux_kernel
2.6.18.5
linuxlinux_kernel
2.6.18.6
linuxlinux_kernel
2.6.18.7
linuxlinux_kernel
2.6.18.8
linuxlinux_kernel
2.6.19
linuxlinux_kernel
2.6.19.1
linuxlinux_kernel
2.6.19.2
linuxlinux_kernel
2.6.19.3
linuxlinux_kernel
2.6.19.4
linuxlinux_kernel
2.6.19.5
linuxlinux_kernel
2.6.19.6
linuxlinux_kernel
2.6.19.7
linuxlinux_kernel
2.6.20
linuxlinux_kernel
2.6.20.1
linuxlinux_kernel
2.6.20.2
linuxlinux_kernel
2.6.20.3
linuxlinux_kernel
2.6.20.4
linuxlinux_kernel
2.6.20.5
linuxlinux_kernel
2.6.20.6
linuxlinux_kernel
2.6.20.7
linuxlinux_kernel
2.6.20.8
linuxlinux_kernel
2.6.20.9
linuxlinux_kernel
2.6.20.10
linuxlinux_kernel
2.6.20.11
linuxlinux_kernel
2.6.20.12
linuxlinux_kernel
2.6.20.13
linuxlinux_kernel
2.6.20.14
linuxlinux_kernel
2.6.20.15
linuxlinux_kernel
2.6.20.16
linuxlinux_kernel
2.6.20.17
linuxlinux_kernel
2.6.20.18
linuxlinux_kernel
2.6.20.19
linuxlinux_kernel
2.6.20.20
linuxlinux_kernel
2.6.20.21
linuxlinux_kernel
2.6.21
linuxlinux_kernel
2.6.21.1
linuxlinux_kernel
2.6.21.2
linuxlinux_kernel
2.6.21.3
linuxlinux_kernel
2.6.21.4
linuxlinux_kernel
2.6.21.5
linuxlinux_kernel
2.6.21.6
linuxlinux_kernel
2.6.21.7
linuxlinux_kernel
2.6.22
linuxlinux_kernel
2.6.22.1
linuxlinux_kernel
2.6.22.2
linuxlinux_kernel
2.6.22.3
linuxlinux_kernel
2.6.22.4
linuxlinux_kernel
2.6.22.5
linuxlinux_kernel
2.6.22.6
linuxlinux_kernel
2.6.22.7
linuxlinux_kernel
2.6.22.8
linuxlinux_kernel
2.6.22.9
linuxlinux_kernel
2.6.22.10
linuxlinux_kernel
2.6.22.11
linuxlinux_kernel
2.6.22.12
linuxlinux_kernel
2.6.22.13
linuxlinux_kernel
2.6.22.14
linuxlinux_kernel
2.6.22.15
linuxlinux_kernel
2.6.22.16
linuxlinux_kernel
2.6.22.17
linuxlinux_kernel
2.6.22.18
linuxlinux_kernel
2.6.22.19
linuxlinux_kernel
2.6.23
linuxlinux_kernel
2.6.23.1
linuxlinux_kernel
2.6.23.2
linuxlinux_kernel
2.6.23.3
linuxlinux_kernel
2.6.23.4
linuxlinux_kernel
2.6.23.5
linuxlinux_kernel
2.6.23.6
linuxlinux_kernel
2.6.23.7
linuxlinux_kernel
2.6.23.8
linuxlinux_kernel
2.6.23.9
linuxlinux_kernel
2.6.23.10
linuxlinux_kernel
2.6.23.11
linuxlinux_kernel
2.6.23.12
linuxlinux_kernel
2.6.23.13
linuxlinux_kernel
2.6.23.14
linuxlinux_kernel
2.6.23.15
linuxlinux_kernel
2.6.23.16
linuxlinux_kernel
2.6.23.17
linuxlinux_kernel
2.6.24
linuxlinux_kernel
2.6.24.1
linuxlinux_kernel
2.6.24.2
linuxlinux_kernel
2.6.24.3
linuxlinux_kernel
2.6.24.4
linuxlinux_kernel
2.6.24.5
linuxlinux_kernel
2.6.24.6
linuxlinux_kernel
2.6.24.7
linuxlinux_kernel
2.6.25
linuxlinux_kernel
2.6.25.1
linuxlinux_kernel
2.6.25.2
linuxlinux_kernel
2.6.25.3
linuxlinux_kernel
2.6.25.4
linuxlinux_kernel
2.6.25.5
linuxlinux_kernel
2.6.25.6
linuxlinux_kernel
2.6.25.7
linuxlinux_kernel
2.6.25.8
linuxlinux_kernel
2.6.25.9
linuxlinux_kernel
2.6.25.10
linuxlinux_kernel
2.6.25.11
linuxlinux_kernel
2.6.25.12
linuxlinux_kernel
2.6.25.13
linuxlinux_kernel
2.6.25.14
linuxlinux_kernel
2.6.25.15
linuxlinux_kernel
2.6.25.16
linuxlinux_kernel
2.6.25.17
linuxlinux_kernel
2.6.25.18
linuxlinux_kernel
2.6.25.19
linuxlinux_kernel
2.6.25.20
linuxlinux_kernel
2.6.26
linuxlinux_kernel
2.6.26.1
linuxlinux_kernel
2.6.26.2
linuxlinux_kernel
2.6.26.3
linuxlinux_kernel
2.6.26.4
linuxlinux_kernel
2.6.26.5
linuxlinux_kernel
2.6.26.6
linuxlinux_kernel
2.6.26.7
linuxlinux_kernel
2.6.26.8
linuxlinux_kernel
2.6.27
linuxlinux_kernel
2.6.27.1
linuxlinux_kernel
2.6.27.2
linuxlinux_kernel
2.6.27.3
linuxlinux_kernel
2.6.27.4
linuxlinux_kernel
2.6.27.5
linuxlinux_kernel
2.6.27.6
linuxlinux_kernel
2.6.27.7
linuxlinux_kernel
2.6.27.8
linuxlinux_kernel
2.6.27.9
linuxlinux_kernel
2.6.27.10
linuxlinux_kernel
2.6.27.11
linuxlinux_kernel
2.6.27.12
linuxlinux_kernel
2.6.27.13
linuxlinux_kernel
2.6.27.14
linuxlinux_kernel
2.6.27.15
linuxlinux_kernel
2.6.27.16
linuxlinux_kernel
2.6.27.17
linuxlinux_kernel
2.6.27.18
linuxlinux_kernel
2.6.27.19
linuxlinux_kernel
2.6.27.20
linuxlinux_kernel
2.6.27.21
linuxlinux_kernel
2.6.27.22
linuxlinux_kernel
2.6.27.23
linuxlinux_kernel
2.6.27.24
linuxlinux_kernel
2.6.27.25
linuxlinux_kernel
2.6.27.26
linuxlinux_kernel
2.6.27.27
linuxlinux_kernel
2.6.27.28
linuxlinux_kernel
2.6.27.29
linuxlinux_kernel
2.6.27.30
linuxlinux_kernel
2.6.27.31
linuxlinux_kernel
2.6.28
linuxlinux_kernel
2.6.28.1
linuxlinux_kernel
2.6.28.2
linuxlinux_kernel
2.6.28.3
linuxlinux_kernel
2.6.28.4
linuxlinux_kernel
2.6.28.5
linuxlinux_kernel
2.6.28.6
linuxlinux_kernel
2.6.28.7
linuxlinux_kernel
2.6.28.8
linuxlinux_kernel
2.6.28.9
linuxlinux_kernel
2.6.28.10
linuxlinux_kernel
2.6.29
linuxlinux_kernel
2.6.29.1
linuxlinux_kernel
2.6.29.2
linuxlinux_kernel
2.6.29.3
linuxlinux_kernel
2.6.29.4
linuxlinux_kernel
2.6.29.5
linuxlinux_kernel
2.6.29.6
linuxlinux_kernel
2.6.30
linuxlinux_kernel
2.6.30.1
linuxlinux_kernel
2.6.30.2
linuxlinux_kernel
2.6.30.3
linuxlinux_kernel
2.6.30.4
linuxlinux_kernel
2.6.30.5
linuxlinux_kernel
2.6.30.6
linuxlinux_kernel
2.6.30.7
linuxlinux_kernel
2.6.30.8
linuxlinux_kernel
2.6.30.9
linuxlinux_kernel
2.6.31
linuxlinux_kernel
2.6.31.1
linuxlinux_kernel
2.6.31.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kvm
dapper
dne
hardy
ignored
intrepid
ignored
jaunty
ignored
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux
dapper
dne
hardy
Fixed 2.6.24-26.64
released
intrepid
Fixed 2.6.27-16.44
released
jaunty
Fixed 2.6.28-17.58
released
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
linux-ec2
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
not-affected
lucid
not-affected
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
not-affected
lucid
not-affected
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
ignored
lucid
not-affected
maverick
not-affected
natty
dne
linux-source-2.6.15
dapper
not-affected
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
not-affected
natty
not-affected
qemu-kvm
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
Common Weakness Enumeration
References
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf
http://marc.info/?l=oss-security&m=125628917011048&w=2
http://marc.info/?l=oss-security&m=125632898507373&w=2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
http://www.securityfocus.com/bid/36803
http://www.ubuntu.com/usn/usn-864-1
https://bugzilla.redhat.com/show_bug.cgi?id=530515
https://exchange.xforce.ibmcloud.com/vulnerabilities/53934
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf
http://marc.info/?l=oss-security&m=125628917011048&w=2
http://marc.info/?l=oss-security&m=125632898507373&w=2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
http://www.securityfocus.com/bid/36803
http://www.ubuntu.com/usn/usn-864-1
https://bugzilla.redhat.com/show_bug.cgi?id=530515
https://exchange.xforce.ibmcloud.com/vulnerabilities/53934
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html