NULL pointer dereference in Linux kernel - CVE-2016-8630
Published: November 10, 2016 / Updated: May 1, 2018
Vulnerability identifier: #VU1171
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-8630
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition on the target system.
The weakness exists in the x86_decode_insn function in arch/x86/kvm/emulate.c due to NULL pointer dereference when KVM is enabled. A local attacker can cause the service to crash via a certain use of a ModR/M byte in an undefined instruction.
The weakness exists in the x86_decode_insn function in arch/x86/kvm/emulate.c due to NULL pointer dereference when KVM is enabled. A local attacker can cause the service to crash via a certain use of a ModR/M byte in an undefined instruction.
Affected software
Linux kernel
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Fedora
kernel-rt (Red Hat package)
kernel
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Fedora
kernel-rt (Red Hat package)
kernel
How to mitigate CVE-2016-8630
Update to version 4.8.7.
kernel-rt (Red Hat package) - update to 3.10.0-514.10.2.rt56.435.el7
kernel - addressed in versions 4.8.7-100.fc23, 4.8.7-200.fc24, 4.8.7-300.fc25, 4.8.8-100.fc23
kernel - addressed in versions 4.8.7-100.fc23, 4.8.7-200.fc24, 4.8.7-300.fc25, 4.8.8-100.fc23