CVE-2009-3722

EUVD-2009-3695
The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 2.6.31
linuxlinux_kernel
2.6.0
linuxlinux_kernel
2.6.1
linuxlinux_kernel
2.6.2
linuxlinux_kernel
2.6.3
linuxlinux_kernel
2.6.4
linuxlinux_kernel
2.6.5
linuxlinux_kernel
2.6.6
linuxlinux_kernel
2.6.7
linuxlinux_kernel
2.6.8
linuxlinux_kernel
2.6.8.1
linuxlinux_kernel
2.6.9
linuxlinux_kernel
2.6.10
linuxlinux_kernel
2.6.11
linuxlinux_kernel
2.6.11.1
linuxlinux_kernel
2.6.11.2
linuxlinux_kernel
2.6.11.3
linuxlinux_kernel
2.6.11.4
linuxlinux_kernel
2.6.11.5
linuxlinux_kernel
2.6.11.6
linuxlinux_kernel
2.6.11.7
linuxlinux_kernel
2.6.11.8
linuxlinux_kernel
2.6.11.9
linuxlinux_kernel
2.6.11.10
linuxlinux_kernel
2.6.11.11
linuxlinux_kernel
2.6.11.12
linuxlinux_kernel
2.6.12
linuxlinux_kernel
2.6.12.1
linuxlinux_kernel
2.6.12.2
linuxlinux_kernel
2.6.12.3
linuxlinux_kernel
2.6.12.4
linuxlinux_kernel
2.6.12.5
linuxlinux_kernel
2.6.12.6
linuxlinux_kernel
2.6.13
linuxlinux_kernel
2.6.13.1
linuxlinux_kernel
2.6.13.2
linuxlinux_kernel
2.6.13.3
linuxlinux_kernel
2.6.13.4
linuxlinux_kernel
2.6.13.5
linuxlinux_kernel
2.6.14
linuxlinux_kernel
2.6.14.1
linuxlinux_kernel
2.6.14.2
linuxlinux_kernel
2.6.14.3
linuxlinux_kernel
2.6.14.4
linuxlinux_kernel
2.6.14.5
linuxlinux_kernel
2.6.14.6
linuxlinux_kernel
2.6.14.7
linuxlinux_kernel
2.6.15
linuxlinux_kernel
2.6.15.1
linuxlinux_kernel
2.6.15.2
linuxlinux_kernel
2.6.15.3
linuxlinux_kernel
2.6.15.4
linuxlinux_kernel
2.6.15.5
linuxlinux_kernel
2.6.15.6
linuxlinux_kernel
2.6.15.7
linuxlinux_kernel
2.6.16
linuxlinux_kernel
2.6.16.1
linuxlinux_kernel
2.6.16.2
linuxlinux_kernel
2.6.16.3
linuxlinux_kernel
2.6.16.4
linuxlinux_kernel
2.6.16.5
linuxlinux_kernel
2.6.16.6
linuxlinux_kernel
2.6.16.7
linuxlinux_kernel
2.6.16.8
linuxlinux_kernel
2.6.16.9
linuxlinux_kernel
2.6.16.10
linuxlinux_kernel
2.6.16.11
linuxlinux_kernel
2.6.16.12
linuxlinux_kernel
2.6.16.13
linuxlinux_kernel
2.6.16.14
linuxlinux_kernel
2.6.16.15
linuxlinux_kernel
2.6.16.16
linuxlinux_kernel
2.6.16.17
linuxlinux_kernel
2.6.16.18
linuxlinux_kernel
2.6.16.19
linuxlinux_kernel
2.6.16.20
linuxlinux_kernel
2.6.16.21
linuxlinux_kernel
2.6.16.22
linuxlinux_kernel
2.6.16.23
linuxlinux_kernel
2.6.16.24
linuxlinux_kernel
2.6.16.25
linuxlinux_kernel
2.6.16.26
linuxlinux_kernel
2.6.16.27
linuxlinux_kernel
2.6.16.28
linuxlinux_kernel
2.6.16.29
linuxlinux_kernel
2.6.16.30
linuxlinux_kernel
2.6.16.31
linuxlinux_kernel
2.6.16.32
linuxlinux_kernel
2.6.16.33
linuxlinux_kernel
2.6.16.34
linuxlinux_kernel
2.6.16.35
linuxlinux_kernel
2.6.16.36
linuxlinux_kernel
2.6.16.37
linuxlinux_kernel
2.6.16.38
linuxlinux_kernel
2.6.16.39
linuxlinux_kernel
2.6.16.40
linuxlinux_kernel
2.6.16.41
linuxlinux_kernel
2.6.16.42
linuxlinux_kernel
2.6.16.43
linuxlinux_kernel
2.6.16.44
linuxlinux_kernel
2.6.16.45
linuxlinux_kernel
2.6.16.46
linuxlinux_kernel
2.6.16.47
linuxlinux_kernel
2.6.16.48
linuxlinux_kernel
2.6.16.49
linuxlinux_kernel
2.6.16.50
linuxlinux_kernel
2.6.16.51
linuxlinux_kernel
2.6.16.52
linuxlinux_kernel
2.6.16.53
linuxlinux_kernel
2.6.16.54
linuxlinux_kernel
2.6.16.55
linuxlinux_kernel
2.6.16.56
linuxlinux_kernel
2.6.16.57
linuxlinux_kernel
2.6.16.58
linuxlinux_kernel
2.6.16.59
linuxlinux_kernel
2.6.16.60
linuxlinux_kernel
2.6.16.61
linuxlinux_kernel
2.6.16.62
linuxlinux_kernel
2.6.17
linuxlinux_kernel
2.6.17.1
linuxlinux_kernel
2.6.17.2
linuxlinux_kernel
2.6.17.3
linuxlinux_kernel
2.6.17.4
linuxlinux_kernel
2.6.17.5
linuxlinux_kernel
2.6.17.6
linuxlinux_kernel
2.6.17.7
linuxlinux_kernel
2.6.17.8
linuxlinux_kernel
2.6.17.9
linuxlinux_kernel
2.6.17.10
linuxlinux_kernel
2.6.17.11
linuxlinux_kernel
2.6.17.12
linuxlinux_kernel
2.6.17.13
linuxlinux_kernel
2.6.17.14
linuxlinux_kernel
2.6.18
linuxlinux_kernel
2.6.18.1
linuxlinux_kernel
2.6.18.2
linuxlinux_kernel
2.6.18.3
linuxlinux_kernel
2.6.18.4
linuxlinux_kernel
2.6.18.5
linuxlinux_kernel
2.6.18.6
linuxlinux_kernel
2.6.18.7
linuxlinux_kernel
2.6.18.8
linuxlinux_kernel
2.6.19
linuxlinux_kernel
2.6.19.1
linuxlinux_kernel
2.6.19.2
linuxlinux_kernel
2.6.19.3
linuxlinux_kernel
2.6.19.4
linuxlinux_kernel
2.6.19.5
linuxlinux_kernel
2.6.19.6
linuxlinux_kernel
2.6.19.7
linuxlinux_kernel
2.6.20
linuxlinux_kernel
2.6.20.1
linuxlinux_kernel
2.6.20.2
linuxlinux_kernel
2.6.20.3
linuxlinux_kernel
2.6.20.4
linuxlinux_kernel
2.6.20.5
linuxlinux_kernel
2.6.20.6
linuxlinux_kernel
2.6.20.7
linuxlinux_kernel
2.6.20.8
linuxlinux_kernel
2.6.20.9
linuxlinux_kernel
2.6.20.10
linuxlinux_kernel
2.6.20.11
linuxlinux_kernel
2.6.20.12
linuxlinux_kernel
2.6.20.13
linuxlinux_kernel
2.6.20.14
linuxlinux_kernel
2.6.20.15
linuxlinux_kernel
2.6.20.16
linuxlinux_kernel
2.6.20.17
linuxlinux_kernel
2.6.20.18
linuxlinux_kernel
2.6.20.19
linuxlinux_kernel
2.6.20.20
linuxlinux_kernel
2.6.20.21
linuxlinux_kernel
2.6.21
linuxlinux_kernel
2.6.21.1
linuxlinux_kernel
2.6.21.2
linuxlinux_kernel
2.6.21.3
linuxlinux_kernel
2.6.21.4
linuxlinux_kernel
2.6.21.5
linuxlinux_kernel
2.6.21.6
linuxlinux_kernel
2.6.21.7
linuxlinux_kernel
2.6.22
linuxlinux_kernel
2.6.22.1
linuxlinux_kernel
2.6.22.2
linuxlinux_kernel
2.6.22.3
linuxlinux_kernel
2.6.22.4
linuxlinux_kernel
2.6.22.5
linuxlinux_kernel
2.6.22.6
linuxlinux_kernel
2.6.22.7
linuxlinux_kernel
2.6.22.8
linuxlinux_kernel
2.6.22.9
linuxlinux_kernel
2.6.22.10
linuxlinux_kernel
2.6.22.11
linuxlinux_kernel
2.6.22.12
linuxlinux_kernel
2.6.22.13
linuxlinux_kernel
2.6.22.14
linuxlinux_kernel
2.6.22.15
linuxlinux_kernel
2.6.22.16
linuxlinux_kernel
2.6.22.17
linuxlinux_kernel
2.6.22.18
linuxlinux_kernel
2.6.22.19
linuxlinux_kernel
2.6.23
linuxlinux_kernel
2.6.23.1
linuxlinux_kernel
2.6.23.2
linuxlinux_kernel
2.6.23.3
linuxlinux_kernel
2.6.23.4
linuxlinux_kernel
2.6.23.5
linuxlinux_kernel
2.6.23.6
linuxlinux_kernel
2.6.23.7
linuxlinux_kernel
2.6.23.8
linuxlinux_kernel
2.6.23.9
linuxlinux_kernel
2.6.23.10
linuxlinux_kernel
2.6.23.11
linuxlinux_kernel
2.6.23.12
linuxlinux_kernel
2.6.23.13
linuxlinux_kernel
2.6.23.14
linuxlinux_kernel
2.6.23.15
linuxlinux_kernel
2.6.23.16
linuxlinux_kernel
2.6.23.17
linuxlinux_kernel
2.6.24
linuxlinux_kernel
2.6.24.1
linuxlinux_kernel
2.6.24.2
linuxlinux_kernel
2.6.24.3
linuxlinux_kernel
2.6.24.4
linuxlinux_kernel
2.6.24.5
linuxlinux_kernel
2.6.24.6
linuxlinux_kernel
2.6.24.7
linuxlinux_kernel
2.6.25
linuxlinux_kernel
2.6.25.1
linuxlinux_kernel
2.6.25.2
linuxlinux_kernel
2.6.25.3
linuxlinux_kernel
2.6.25.4
linuxlinux_kernel
2.6.25.5
linuxlinux_kernel
2.6.25.6
linuxlinux_kernel
2.6.25.7
linuxlinux_kernel
2.6.25.8
linuxlinux_kernel
2.6.25.9
linuxlinux_kernel
2.6.25.10
linuxlinux_kernel
2.6.25.11
linuxlinux_kernel
2.6.25.12
linuxlinux_kernel
2.6.25.13
linuxlinux_kernel
2.6.25.14
linuxlinux_kernel
2.6.25.15
linuxlinux_kernel
2.6.25.16
linuxlinux_kernel
2.6.25.17
linuxlinux_kernel
2.6.25.18
linuxlinux_kernel
2.6.25.19
linuxlinux_kernel
2.6.25.20
linuxlinux_kernel
2.6.26
linuxlinux_kernel
2.6.26.1
linuxlinux_kernel
2.6.26.2
linuxlinux_kernel
2.6.26.3
linuxlinux_kernel
2.6.26.4
linuxlinux_kernel
2.6.26.5
linuxlinux_kernel
2.6.26.6
linuxlinux_kernel
2.6.26.7
linuxlinux_kernel
2.6.26.8
linuxlinux_kernel
2.6.27
linuxlinux_kernel
2.6.27.1
linuxlinux_kernel
2.6.27.2
linuxlinux_kernel
2.6.27.3
linuxlinux_kernel
2.6.27.4
linuxlinux_kernel
2.6.27.5
linuxlinux_kernel
2.6.27.6
linuxlinux_kernel
2.6.27.7
linuxlinux_kernel
2.6.27.8
linuxlinux_kernel
2.6.27.9
linuxlinux_kernel
2.6.27.10
linuxlinux_kernel
2.6.27.11
linuxlinux_kernel
2.6.27.12
linuxlinux_kernel
2.6.27.13
linuxlinux_kernel
2.6.27.14
linuxlinux_kernel
2.6.27.15
linuxlinux_kernel
2.6.27.16
linuxlinux_kernel
2.6.27.17
linuxlinux_kernel
2.6.27.18
linuxlinux_kernel
2.6.27.19
linuxlinux_kernel
2.6.27.20
linuxlinux_kernel
2.6.27.21
linuxlinux_kernel
2.6.27.22
linuxlinux_kernel
2.6.27.23
linuxlinux_kernel
2.6.27.24
linuxlinux_kernel
2.6.27.25
linuxlinux_kernel
2.6.27.26
linuxlinux_kernel
2.6.27.27
linuxlinux_kernel
2.6.27.28
linuxlinux_kernel
2.6.27.29
linuxlinux_kernel
2.6.27.30
linuxlinux_kernel
2.6.27.31
linuxlinux_kernel
2.6.28
linuxlinux_kernel
2.6.28.1
linuxlinux_kernel
2.6.28.2
linuxlinux_kernel
2.6.28.3
linuxlinux_kernel
2.6.28.4
linuxlinux_kernel
2.6.28.5
linuxlinux_kernel
2.6.28.6
linuxlinux_kernel
2.6.28.7
linuxlinux_kernel
2.6.28.8
linuxlinux_kernel
2.6.28.9
linuxlinux_kernel
2.6.28.10
linuxlinux_kernel
2.6.29
linuxlinux_kernel
2.6.29.1
linuxlinux_kernel
2.6.29.2
linuxlinux_kernel
2.6.29.3
linuxlinux_kernel
2.6.29.4
linuxlinux_kernel
2.6.29.5
linuxlinux_kernel
2.6.29.6
linuxlinux_kernel
2.6.30
linuxlinux_kernel
2.6.30.1
linuxlinux_kernel
2.6.30.2
linuxlinux_kernel
2.6.30.3
linuxlinux_kernel
2.6.30.4
linuxlinux_kernel
2.6.30.5
linuxlinux_kernel
2.6.30.6
linuxlinux_kernel
2.6.30.7
linuxlinux_kernel
2.6.30.8
linuxlinux_kernel
2.6.30.9
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kvm
dapper
dne
hardy
ignored
intrepid
ignored
jaunty
ignored
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux
dapper
dne
hardy
Fixed 2.6.24-26.64
released
intrepid
Fixed 2.6.27-16.44
released
jaunty
Fixed 2.6.28-17.58
released
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
linux-ec2
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
not-affected
lucid
not-affected
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
not-affected
lucid
not-affected
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
ignored
lucid
not-affected
maverick
not-affected
natty
dne
linux-source-2.6.15
dapper
not-affected
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
not-affected
natty
not-affected
qemu-kvm
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
Common Weakness Enumeration
References
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2
http://marc.info/?l=oss-security&m=125678631403558&w=2
http://marc.info/?l=oss-security&m=125680666827148&w=2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
http://www.redhat.com/support/errata/RHSA-2010-0126.html
http://www.securityfocus.com/bid/37221
http://www.ubuntu.com/usn/usn-864-1
https://bugzilla.redhat.com/show_bug.cgi?id=531660
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2
http://marc.info/?l=oss-security&m=125678631403558&w=2
http://marc.info/?l=oss-security&m=125680666827148&w=2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
http://www.redhat.com/support/errata/RHSA-2010-0126.html
http://www.securityfocus.com/bid/37221
http://www.ubuntu.com/usn/usn-864-1
https://bugzilla.redhat.com/show_bug.cgi?id=531660
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892