The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel | Dec 1, 2016 | Feb 21, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 28, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 22, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade ocfs2-kmp-paeUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-extraUpgrade kernel-ec2-develUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-traceUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-ec2-baseUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-traceUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-paeUpgrade ocfs2-kmp-xenUpgrade kernel-ppc64Upgrade kernel-trace-extraUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-pae-extraUpgrade kernel-ec2Upgrade gfs2-kmp-paeUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-ppc64Upgrade kernel-trace-baseUpgrade sle-hae-releaseUpgrade cluster-network-kmp-ppc64Upgrade xen-kmp-defaultUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-xenUpgrade kernel-trace-develUpgrade kernel-ppc64-develUpgrade xen-kmp-trace | Feb 17, 2015 | Feb 21, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.5.0-26-genericUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-3.2.0-39-powerpc64-smp | Nov 8, 2024 | Feb 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub