CVE-2014-8369

High

Published: 10/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The kvm_iommu_map_pages function in the Linux kernel through version 3.17.2 miscalculates the number of pages during the handling of a mapping failure, allowing guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.

Risk Assessment

This vulnerability may lead to denial of service in the host OS, affecting service availability. There is also a risk of unspecified impacts that could affect system stability.

Recommendation

It is recommended to update the Linux kernel to version 3.17.3 or later to mitigate this vulnerability.

Other vulnerabilities in Linux kernel (versions up to 3.17.2)

CVE-2014-7825High
The Linux kernel up to version 3.17.2 has an issue with handling private syscall numbers in the perf subsystem, which may allow local users to cause denial of service or bypass the ASLR protection mechanism via a crafted application.

Original NVD description (English source)

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.