CVE-2010-0306 Privilege escalation in n/a
Guest OS users can escalate privileges or crash the guest by exploiting a race condition in the KVM x86 emulator when SMP is enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0306?
CVE-2010-0306 is a medium-severity vulnerability in n/a, published on 12 Feb 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.
Weakness: CWE-264
Which versions are affected by CVE-2010-0306?
It affects 1 product.
Products include Kvm Qumranet Kvm.
How do I fix CVE-2010-0306?
Apply the vendor's patch.
Is CVE-2010-0306 being exploited?
There is no known exploitation of CVE-2010-0306 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xpcm-5q5j-h76x.