F5 Networks BIG-IP : Linux kernel vulnerabilities (K62700573)
Medium Nessus Plugin ID 88066
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionCVE-2010-5313 Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842.
CVE-2014-7842 Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313.
SolutionUpgrade to one of the non-vulnerable versions listed in the F5 Solution K62700573.