CVE-2009-4031
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in...
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
Exploit likelihood
What each source reports
NVD Score used
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
- Record
CVE-2009-4031- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
- Record
CVE-2009-4031- Updated
- 2026-11-02
EUVDEUVD-2009-4002 No score
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
- Record
EUVD-2009-4002- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmf9-49hh-xhh2 No score
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in...
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
- Record
GHSA-vmf9-49hh-xhh2- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kvmDebian:5.0 From an advisory covering 3 CVEs |
before 72+dfsg-5~lenny4, plus listed versions 72+dfsg-472+dfsg-5~lenny172+dfsg-5~lenny272+dfsg-5~lenny3 |
72+dfsg-5~lenny4 |
kmod-kvmRed Hat:rhel_virtualization:5::client |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvmRed Hat:rhel_virtualization:5::client |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-debuginfoRed Hat:rhel_virtualization:5::client |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::client |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-toolsRed Hat:rhel_virtualization:5::client |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kmod-kvmRed Hat:rhel_virtualization:5::server |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvmRed Hat:rhel_virtualization:5::server |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::server |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
kvm-toolsRed Hat:rhel_virtualization:5::server |
before 0:83-105.el5_4.13 | 0:83-105.el5_4.13 |
rhev-hypervisorRed Hat:enterprise_linux:5::hypervisor From an advisory covering 2 CVEs |
before 0:5.4-2.1.3.el5_4rhev2_1 | 0:5.4-2.1.3.el5_4rhev2_1 |
rhev-hypervisor-pxeRed Hat:enterprise_linux:5::hypervisor From an advisory covering 2 CVEs |
before 0:5.4-2.1.3.el5_4rhev2_1 | 0:5.4-2.1.3.el5_4rhev2_1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4031 is a high vulnerability (CVSS 7.8) in Linux Kernel, published November 27, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.11%, the 87th percentile. Fixed in kmod-kvm 0:83-105.el5_4.13.
References
openwall.com/lists/oss-security/2009/11/25/1
secunia.com/advisories/37720
lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html
kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089
Show 24 moreShow less
redhat.com/archives/fedora-package-announce/2009-December/msg00777.html
git.kernel.org?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88
securityfocus.com/bid/37130
bugzilla.redhat.com/show_bug.cgi?id=541160
nvd.nist.gov/vuln/detail/CVE-2009-4031
github.com/advisories/GHSA-vmf9-49hh-xhh2
access.redhat.com/errata/RHSA-2009:1659
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1659.json
cve.org/CVERecord?id=CVE-2009-4031
redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/Red_Hat_Enterprise_Virtualization_Hypervisor/5.4-2.1/html/RHEV-Hypervisor_Deployment_Guide