Permissions, Privileges, and Access Controls in Linux kernel - CVE-2011-4347
Published: June 8, 2013 / Updated: August 11, 2020
Vulnerability identifier: #VU42788
CSH Severity: Medium
CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-4347
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.
Affected software
Linux kernel
Ubuntu
linux (Ubuntu package)
linux-lts-backport-maverick (Ubuntu package)
linux-lts-backport-natty (Ubuntu package)
linux-lts-backport-oneiric (Ubuntu package)
Ubuntu
linux (Ubuntu package)
linux-lts-backport-maverick (Ubuntu package)
linux-lts-backport-natty (Ubuntu package)
linux-lts-backport-oneiric (Ubuntu package)
How to mitigate CVE-2011-4347
Install update from vendor's website.
linux (Ubuntu package) - addressed in versions 2.6.32-41.88, 2.6.38-14.58, 3.0.0-19.33
linux-lts-backport-maverick (Ubuntu package) - update to 2.6.35-32.68~lucid1
linux-lts-backport-natty (Ubuntu package) - update to 2.6.38-15.59~lucid1
linux-lts-backport-oneiric (Ubuntu package) - update to 3.0.0-19.33~lucid1
linux-lts-backport-maverick (Ubuntu package) - update to 2.6.35-32.68~lucid1
linux-lts-backport-natty (Ubuntu package) - update to 2.6.38-15.59~lucid1
linux-lts-backport-oneiric (Ubuntu package) - update to 3.0.0-19.33~lucid1