CVE-2017-2583

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.

Metrics

CVSS 3.0 8.4/10CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3Issue Tracking, Third Party Advisory
http://www.debian.org/security/2017/dsa-3791
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/19/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/95673Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1615
https://access.redhat.com/errata/RHSA-2017:1616
https://bugzilla.redhat.com/show_bug.cgi?id=1414735Issue Tracking, Patch
https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3Issue Tracking, Patch, Third Party Advisory
https://usn.ubuntu.com/3754-1/
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3Issue Tracking, Third Party Advisory
http://www.debian.org/security/2017/dsa-3791
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/19/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/95673Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1615
https://access.redhat.com/errata/RHSA-2017:1616
https://bugzilla.redhat.com/show_bug.cgi?id=1414735Issue Tracking, Patch
https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3Issue Tracking, Patch, Third Party Advisory
https://usn.ubuntu.com/3754-1/

Timeline

Published: Feb 6, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-25847.1arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a de CVE-2017-25855.9Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant CVE-2017-25865.5A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to cra CVE-2017-25875.5A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.CVE-2017-25899.0It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar CVE-2017-25908.1A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions CVE-2017-25917.5389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "a CVE-2017-25925.5python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class CVE-2017-25947.5hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE CVE-2017-25956.5It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via p CVE-2017-25966.5The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which CVE-2017-25984.3Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored sec