vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-2287

N/A
Published: July 1, 2009 at 12:26 PM UTC
Updated: June 16, 2026 at 11:09 PM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux· Canonicalrubygems
95%
6.068.048.109.04
Debian Linux· Debiandrupal
95%
4.05.0
Linux Kernel· Linux
95%
2.6.0 ≤ v < 2.6.30
Affected range stops below 2.6.30, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (10)

x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4
x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb
Third Party Advisoryx_refsource_SECUNIABroken Link
Source: [email protected]
http://secunia.com/advisories/35675
Third Party Advisoryx_refsource_SECUNIABroken Link
Source: [email protected]
http://secunia.com/advisories/36045
Third Party Advisoryx_refsource_SECUNIABroken Link
Source: [email protected]
http://secunia.com/advisories/36054
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2009/dsa-1845
Vendor Advisoryx_refsource_MANDRIVABroken Link
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

CVSS

4.9MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card