What are the two unfixed DoS vulnerabilities found by the Linux kernel?

This article introduces what are the two unfixed DoS vulnerabilities found in the Linux kernel. The content is very detailed. Interested friends can use it for reference. I hope it will be helpful to you.

Contributor Wanpeng Li (Li Wanpeng) recently found two denial of service (DOS) in Linux Kernel, allowing local attackers to use null pointer references to BUG to trigger DOS status. The first vulnerability, numbered CVE-2018-19406 in Common Vulnerabilities and Exposure, exists in the kvm_pv_send_ipi function of the Linux kernel, which is defined in the arch/x86/kvm/lapic.c file.

A CVE-2018-19406 vulnerability has been identified in Linux Kernel 4.19.2 that allows the attacker of this visit to use crafted system calls on unrepaired devices to reach the DOS state. This problem is caused by the failure of the Advanced Programmable interrupt Controller (APIC) to initialize correctly.

Li wrote in his announcement: "the apic mapping has not been initialized, and the pv_send_ipi interface was triggered using vmcall in the test case, resulting in kvm- > arch.apic_map being dereferenced."

The second vulnerability discovered by Li is limited to situations where an attacker can physically access the device. The problem is numbered CVE-2018-19407 in the CVE library and appears in the kvm_pv_send_ipi functional kernel function in the Arch/x86/kvm/lapic.c source code file. Since the I / O Advanced Programmable interrupt Controller (I / O APIC) cannot be initialized, a local attacker can deny service by submitting a malicious system call that triggers a NULL pointer delay condition.

On the Linux kernel found that the two unfixed DoS vulnerabilities are what are shared here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.