The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-headersUpgrade kvm-toolsUpgrade kernel-debugUpgrade kvm-qemu-imgUpgrade kernelUpgrade kernel-debug-develUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kvm | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade kernel-ppc64Upgrade gfs2-kmp-traceUpgrade kernel-xen-devel-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-vanilla-debuginfoUpgrade kernel-pae-devel-debuginfoUpgrade kernel-debug-develUpgrade ofed-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-desktopUpgrade kernel-trace-debuginfoUpgrade cluster-network-kmp-defaultUpgrade kernel-develUpgrade kernel-desktop-devel-debuginfoUpgrade ocfs2-kmp-rtUpgrade btrfs-kmp-xenUpgrade kernel-desktop-baseUpgrade cluster-network-kmp-xenUpgrade kernel-desktop-base-debuginfoUpgrade kernel-default-extraUpgrade btrfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-docsUpgrade kernel-vanilla-debugsourceUpgrade ocfs2-kmp-traceUpgrade kernel-vanillaUpgrade kernel-trace-extraUpgrade kernel-desktop-debugsourceUpgrade kernel-rt_trace-develUpgrade kernel-ppc64-develUpgrade kernel-symsUpgrade kernel-debug-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-rt_trace-baseUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-default-debugsourceUpgrade kernel-xen-debuginfoUpgrade kernel-rt-develUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ec2-base-debuginfoUpgrade kernel-traceUpgrade kernel-debug-base-debuginfoUpgrade kernel-ec2-debugsourceUpgrade kernel-ec2-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade lttng-modules-kmp-rtUpgrade kernel-debugUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-vanilla-baseUpgrade xen-kmp-traceUpgrade kernel-defaultUpgrade ext4dev-kmp-defaultUpgrade kernel-source-rtUpgrade ocfs2-kmp-paeUpgrade kernel-xen-base-debuginfoUpgrade kernel-trace-develUpgrade iscsitarget-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade cluster-network-kmp-rtUpgrade ext4dev-kmp-paeUpgrade kernel-default-base-debuginfoUpgrade kernel-pae-debugsourceUpgrade kernel-pae-debuginfoUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade hyper-v-kmp-paeUpgrade kernel-rt-baseUpgrade kernel-ec2-debuginfoUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-xen-debugsourceUpgrade kernel-desktop-debuginfoUpgrade drbd-kmp-rtUpgrade kernel-paeUpgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rt_traceUpgrade kernel-source-vanillaUpgrade ext4dev-kmp-traceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-syms-rtUpgrade hyper-v-kmp-defaultUpgrade kernel-trace-devel-debuginfoUpgrade btrfs-kmp-paeUpgrade ofed-kmp-rt_traceUpgrade kernel-pae-develUpgrade kernel-default-devel-debuginfoUpgrade sle-hae-releaseUpgrade kernel-trace-debugsourceUpgrade kernel-pae-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-rtUpgrade gfs2-kmp-xenUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-xenUpgrade gfs2-kmp-ppc64Upgrade kernel-debug-debugsourceUpgrade kernel-default-baseUpgrade xen-kmp-paeUpgrade kernel-ec2Upgrade kernel-pae-extraUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-xenUpgrade xen-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-rt_traceUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-desktop-develUpgrade gfs2-kmp-pae | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-2.6.32-46-386Upgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-genericUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.5.0-28-generic | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub