CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Permissions Privileges and Access Controls
Summary: the wrmsr processing functionality in the kvm subsystem in the linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest os users to cause a denial of service (host os crash) by leveraging guest os privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2014-11-10
Last Modified Date: 2017-01-03