CVE-2009-4004

CVE-2009-4004 describes a buffer overflow vulnerability in the KVM subsystem of the Linux kernel, specifically within the kvm_vcpu_ioctl_x86_setup_mce function. This flaw allows a local attacker to trigger a denial of service through memory corruption or potentially escalate privileges by sending a crafted KVM_X86_SETUP_MCE IOCTL request with an excessive number of MCE banks. The vulnerability is rated as High severity (CVSS 7.8), indicating that a low-privileged local attacker can achieve significant impact with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.