Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks
Published Nov 20, 2009
7.8
HIGHCVSS 3.1
EPSS 0.41%
Description
Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks.
Affected products
No data.
- ≤ 2.6.31.14
- 2.6.32
- 2.6.32
- 2.6.32
- 2.6.32
- 2.6.32
- 2.6.32
- 2.6.32
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as KVM (Kernel-based Virtual Machine) is only supported in Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is not vulnerable to this issue because it does not include the change that introduced this buffer overflow vulnerability.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
AV:L/AC:L/Au:N/C:C/I:C/A:C
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (9 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.41% (0.00406) | 32.56th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.41% (0.00406) | 32.15th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.05% (0.00052) | 13.28th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00042) | 5.07th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00042) | 5.63th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.03% (0.01034) | 41.69th | v2 (v2022.01.01) |
| Sep 10, 2022 | 1.03% (0.01034) | 39.91th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.03% (0.01034) | 37.91th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.03% (0.01034) | 20.32th | v2 (v2022.01.01) |
References (9)
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa x_refsource_CONFIRM
- http://secunia.com/advisories/37357 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7 x_refsource_CONFIRMBroken Link
- http://www.securityfocus.com/bid/37035 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2009/3267 vdb-entryx_refsource_VUPENBroken Link
- https://access.redhat.com/security/cve/CVE-2009-4004 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54302 vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
- https://nvd.nist.gov/vuln/detail/CVE-2009-4004
- https://www.cve.org/CVERecord?id=CVE-2009-4004
| Link | Providers | Tags |
|---|---|---|
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa | x_refsource_CONFIRM | |
| http://secunia.com/advisories/37357 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7 | x_refsource_CONFIRMBroken Link | |
| http://www.securityfocus.com/bid/37035 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.vupen.com/english/advisories/2009/3267 | vdb-entryx_refsource_VUPENBroken Link | |
| https://access.redhat.com/security/cve/CVE-2009-4004 | Vendor Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54302 | vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry | |
| https://nvd.nist.gov/vuln/detail/CVE-2009-4004 | ||
| https://www.cve.org/CVERecord?id=CVE-2009-4004 |
Change history (0)
No recorded changes yet.