Linux Kernel NULL pointer reference Local Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel
Description:
--------------------------------------------------------------------------------
Bugtraq id: 61995
CVE (CAN) ID: CVE-2013-5634

Linux Kernel is the Kernel of the Linux operating system.

This vulnerability is applicable to Linux kernel on the ARM platform and supports CONFIG_KVM. When calling ioctl (KVM_GET_REG_LIST) on the KVM device, the vCPU is not initialized correctly. a null pointer reference vulnerability exists, local attackers can exploit this vulnerability to cause a kernel crash.

<* Source: Prasad J Pandit

Link: http://seclists.org/oss-sec/2013/q3/492
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Linux Kernel: click here
Linux Kernel: click here

Recommended: the Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5