CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.1
CWE Name:  Permissions Privileges and Access Controls
Summary: the handle_dr function in arch/x86/kvm/vmx.c in the kvm subsystem in the linux kernel before 2.6.31.1 does not properly verify the current privilege level (cpl) before accessing a debug register, which allows guest os users to cause a denial of service (trap) on the host os via a crafted application.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2009-10-30
Last Modified Date: 2017-09-19