CVE-2009-3722
The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2
- http://marc.info/?l=oss-security&m=125678631403558&w=2
- http://marc.info/?l=oss-security&m=125680666827148&w=2
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1