CVE-2010-2938 — Kernel vulnerability

CWE-3997 documents7 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 67.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
XENDebian XENLinux Kernel+3 more
Timeline
PublishedOct 8
Latest updateMay 14

Description

arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying hardware support for these fields, which allows local users to cause a denial of service (host OS crash) by requesting a VMCS dump for a fully virtualized Xen guest.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages6 packages

▶NVDlinux/linux_kernel2.6.18
▶debiandebian/xen< xen 4.0.1-1 (bookworm)
▶Debianxen/xen< 4.0.1-1+3

🔴Vulnerability Details

2
GHSA
GHSA-9cjj-33q2-5pjr: arch/x86/hvm/vmx/vmcs↗2022-05-14
▶
OSV
CVE-2010-2938: arch/x86/hvm/vmx/vmcs↗2010-10-08
▶

📋Vendor Advisories

3
VMware
VMware ESX third party updates for Service Console packages glibc and dhcp↗2011-10-12
▶
Red Hat
kernel: guest crashes on non-EPT machines may crash the host as well↗2010-09-29
▶
Debian
CVE-2010-2938: xen - arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implemen...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-2938 kernel: guest crashes on non-EPT machines may crash the host as well↗2010-08-02
▶