Denial of Service Vulnerability in Linux Kernel - CVE-2013-5634
Summary
DEBIAN-CVE-2013-5634: arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified... Affects linux versions < 3.11.5-1. Fixed in 3.11.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services for software applications. It supports various architectures, including ARM, and is widely used in servers, desktops, and embedded systems. The vulnerability CVE-2013-5634 affects the ARM platform when using Kernel-based Virtual Machine (KVM), which allows multiple virtual machines to run on a single host. This vulnerability can lead to severe consequences, including system crashes and potential data loss.
Vulnerability Detail
The vulnerability exists in the arch/arm/kvm/arm.c file of the Linux kernel prior to version 3.10. It arises when KVM is utilized without proper initialization of virtual CPUs (vCPUs) before invoking the KVM_GET_REG_LIST ioctl call. This oversight can lead to a NULL pointer dereference, resulting in a denial of service (OOPS) and crashing the host operating system. The impact may extend beyond just system crashes, potentially allowing for other unspecified effects.
How To Fix
Minimum fixed version
3.11.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, ensure that all vCPUs are properly initialized before making ioctl calls to KVM. This can be done by reviewing the code to ensure that the initialization sequence is correctly implemented.
Conclusion
CVE-2013-5634 is a critical vulnerability in the Linux kernel affecting ARM architecture when using KVM. It can lead to denial of service and system crashes. Updating to the patched version is essential to secure your system against this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2013-5634 is a vulnerability in the Linux kernel that affects the ARM architecture when using KVM, allowing for potential denial of service.
If exploited, this vulnerability can cause your host operating system to crash, leading to downtime and potential data loss.
The vulnerability affects Linux kernel versions prior to 3.10 on the ARM platform.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If an immediate update is not possible, ensure that all vCPUs are initialized correctly before making ioctl calls to KVM to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
