CVE-2017-2596

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.8

Description The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of service, specifically through memory consumption. The nested vmx check vmptr function in the Linux kernel improperly emulates the VMXON instruction, allowing KVM L1 guest OS users to cause a denial of service by leveraging the mishandling of page references.

Recommendations For Linux kernel versions prior to 4.9.8, update to version 4.9.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the nested vmx check vmptr function to minimize the risk of exploitation.