The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug | Dec 1, 2016 | Feb 21, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 28, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 22, 2013 |
| Suse | — | Upgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-xen-extraUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-traceUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-trace-develUpgrade gfs2-kmp-paeUpgrade sle-hae-releaseUpgrade cluster-network-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-pae-extraUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-ppc64Upgrade kernel-ppc64-develUpgrade gfs2-kmp-traceUpgrade kernel-trace-extraUpgrade gfs2-kmp-xenUpgrade xen-kmp-paeUpgrade kernel-ppc64Upgrade kernel-paeUpgrade ocfs2-kmp-xenUpgrade kernel-defaultUpgrade cluster-network-kmp-paeUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade xen-kmp-traceUpgrade ocfs2-kmp-default | Feb 17, 2015 | Feb 21, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-32-omapUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-3.5.0-26-genericUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.2.0-39-powerpc64-smp | Nov 8, 2024 | Feb 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub