Medium severity · published Nov 10, 2014
CVE-2014-3690
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a…
5.5
CVSS
0.5%
EPSS
No
On KEV
Description
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 3.17.2 · source: NVD
DL
Debian Linux · Debian
7.0 · source: NVD
EL
Enterprise Linux · Redhat
5.0 · source: NVD
EV
Evergreen · Opensuse
11.4 · source: NVD
LE
Linux Enterprise Real Time Extension · Suse
11 · source: NVD
LE
Linux Enterprise Software Development Kit · Suse
12 · source: NVD
LE
Linux Enterprise Workstation Extension · Suse
12 · source: NVD
SL
Suse Linux Enterprise Desktop · Novell
12.0 · source: NVD
SL
Suse Linux Enterprise Server · Novell
11; 12.0 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 14.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3690
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3690
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0290.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability