A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local users in a KVM guest to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the "pit_ioport_read()" function in arch/x86/kvm/i8254.c, which can be exploited to e.g. crash the KVM host by reading from the "/dev/port" device in a KVM guest.

Successful exploitation may require root privileges in the KVM guest.

Solution
Update to version 2.6.32.9.

Provided and/or discovered by
Reported in a Red Hat bug.

Changelog
Further details available in Customer Area

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=560887
http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commit;h=336f40a728b9a4a5db5e1df5c89852c79ff95604
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=ee73f656a604d5aa9df86a97102e4e462dd79924

Deep Links
Links available in Customer Area