CVE-2017-8106
N/A
Published: April 24, 2017 at 11:00 PM UTC
Updated: June 17, 2026 at 01:25 AM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%
Description
The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.123.12.13.12.103.12.113.12.123.12.133.12.143.12.153.12.163.12.173.12.183.12.193.12.23.12.203.12.213.12.223.12.233.12.243.12.253.12.263.12.273.12.283.12.293.12.33.12.303.12.313.12.323.12.333.12.343.12.353.12.363.12.373.12.383.12.393.12.43.12.403.12.413.12.423.12.433.12.443.12.453.12.463.12.473.12.483.12.493.12.53.12.503.12.513.12.523.12.533.12.543.12.553.12.563.12.573.12.583.12.593.12.63.12.73.12.83.12.93.133.14.673.14.683.15
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (2)
x_refsource_MISCIssue Tracking
Source: [email protected]
https://bugzilla.kernel.org/show_bug.cgi?id=195167Quick Info
StatusMODIFIED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card