CVE-2014-0155

Linux Kernel < 3.14.1 - Denial of Service via I/O APIC Redirection Table

Title source: llm
STIX 2.1

Description

The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced.

References (3)

Core 3
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1081589
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/04/07/2

Scores

EPSS 0.0098
EPSS Percentile 58.2%

Details

CWE
CWE-20
Status published
Products (1)
linux/linux_kernel < 3.14.1
Published Apr 14, 2014
Tracked Since Feb 18, 2026