Linux Kernel KVM illegal access Denial of Service Vulnerability

Release date: 2011-11-28
Updated on: 2011-11-29

Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 50811
Cve id: CVE-2011-4347

Linux is the kernel of a free computer.

The kvm_vm_ioctl_assign_device function has an illegal access vulnerability. attackers who can access the affected applications can exploit this vulnerability to load arbitrary modules and cause DOS.

<* Source: Petr Matousek

Link: http://thread.gmane.org/gmane.comp.emulators.kvm.devel/82043
Https://bugzilla.redhat.com/show_bug.cgi? Id = 756084
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/