Denial of Service Vulnerability in Linux Kernel on ARM Platforms - CVE-2013-5634
Summary
CVE-2013-5634: arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified... Affects linux versions < 3.11.5-1. Fixed in 3.11.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It supports a wide range of hardware architectures, including ARM, which is commonly used in embedded systems and mobile devices. This vulnerability specifically affects the ARM platform when using Kernel-based Virtual Machine (KVM), a virtualization solution that allows multiple virtual machines to run on a single host. The vulnerability arises from improper handling of virtual CPU (vCPU) initialization, leading to potential system crashes.
Vulnerability Detail
CVE-2013-5634 is a vulnerability found in the Linux kernel prior to version 3.10 on ARM platforms utilizing KVM. It allows host OS users to trigger a denial of service by causing a NULL pointer dereference during a KVM_GET_REG_LIST ioctl call, which can result in an OOPS and crash the host operating system. The vulnerability stems from the omission of vCPU initialization, which is critical for the proper functioning of virtual machines. The impact of this vulnerability can range from service interruptions to potential data loss, depending on the system's configuration and usage.
How To Fix
Minimum fixed version
3.11.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using KVM or ensure that all vCPUs are properly initialized before making ioctl calls. However, this is not a permanent solution and upgrading the kernel is strongly recommended.
Conclusion
CVE-2013-5634 is a critical vulnerability in the Linux kernel affecting ARM platforms using KVM, leading to potential denial of service. Users are advised to upgrade their kernel to mitigate this risk. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2013-5634 is a vulnerability in the Linux kernel that affects ARM platforms using KVM, allowing for denial of service due to improper vCPU initialization.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The consequences include potential denial of service, system crashes, and possible data loss, depending on the system's configuration.
Yes, upgrading to Linux kernel version 3.11.5-1 or later will patch this vulnerability.
If an immediate upgrade is not possible, avoid using KVM or ensure that all vCPUs are initialized properly as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
