{"id":"CVE-2017-8106","details":"The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer.","modified":"2026-03-12T22:43:57.524452Z","published":"2017-04-24T23:59:00.753Z","related":["SUSE-SU-2017:1360-1","SUSE-SU-2017:2920-1"],"references":[{"type":"REPORT","url":"https://bugzilla.kernel.org/show_bug.cgi?id=195167"},{"type":"REPORT","url":"https://launchpad.net/bugs/1678676"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8106.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"3.12"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.1"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.3"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.4"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.5"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.6"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.7"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.8"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.9"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.10"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.11"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.12"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.13"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.14"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.15"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.16"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.17"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.18"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.19"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.20"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.21"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.22"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.23"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.24"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.25"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.26"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.27"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.28"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.29"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.30"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.31"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.32"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.33"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.34"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.35"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.36"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.37"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.38"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.39"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.40"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.41"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.42"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.43"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.44"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.45"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.46"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.47"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.48"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.49"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.50"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.51"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.52"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.53"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.54"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.55"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.56"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.57"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.58"}]},{"events":[{"introduced":"0"},{"last_affected":"3.12.59"}]},{"events":[{"introduced":"0"},{"last_affected":"3.13"}]},{"events":[{"introduced":"0"},{"last_affected":"3.14.67"}]},{"events":[{"introduced":"0"},{"last_affected":"3.14.68"}]},{"events":[{"introduced":"0"},{"last_affected":"3.15"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}