Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kvmUpgrade kernel-docUpgrade kernel-develUpgrade python-perfUpgrade kvm-toolsUpgrade perfUpgrade kmod-kvmUpgrade kernel-debugUpgrade kmod-kvm-debugUpgrade kernel-headersUpgrade kernelUpgrade kvm-qemu-imgUpgrade kernel-debug-devel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2013 |
| Suse | — | Upgrade cluster-network-kmp-rtUpgrade kernel-xen-devel-debuginfoUpgrade btrfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-xen-debuginfoUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-pae-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade xen-kmp-paeUpgrade gfs2-kmp-traceUpgrade kernel-trace-baseUpgrade kernel-ec2-baseUpgrade kernel-rt_trace-baseUpgrade kernel-debug-devel-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-rt-develUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-ppc64Upgrade kernel-default-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade ext4dev-kmp-traceUpgrade kernel-ec2-extraUpgrade kernel-default-devel-debuginfoUpgrade kernel-ppc64-baseUpgrade hyper-v-kmp-traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-desktop-develUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-desktop-baseUpgrade kernel-rt_trace-develUpgrade kernel-pae-extraUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktop-debuginfoUpgrade xen-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-ppc64Upgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-rt_traceUpgrade kernel-ppc64Upgrade kernel-syms-rtUpgrade iscsitarget-kmp-rt_traceUpgrade ext4dev-kmp-defaultUpgrade gfs2-kmp-xenUpgrade kernel-ec2-debugsourceUpgrade kernel-trace-base-debuginfoUpgrade kernel-trace-debuginfoUpgrade kernel-pae-base-debuginfoUpgrade kernel-default-baseUpgrade kernel-ppc64-develUpgrade kernel-source-vanillaUpgrade kernel-trace-debugsourceUpgrade ext4dev-kmp-xenUpgrade ocfs2-kmp-traceUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2-debuginfoUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-xen-baseUpgrade kernel-debug-debugsourceUpgrade cluster-network-kmp-xenUpgrade kernel-debug-debuginfoUpgrade kernel-vanilla-debugsourceUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-pae-baseUpgrade kernel-vanillaUpgrade kernel-pae-devel-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-trace-extraUpgrade cluster-network-kmp-paeUpgrade kernel-xen-debugsourceUpgrade kernel-develUpgrade kernel-trace-devel-debuginfoUpgrade ocfs2-kmp-xenUpgrade kernel-desktopUpgrade ext4dev-kmp-paeUpgrade kernel-default-develUpgrade lttng-modules-kmp-rtUpgrade kernel-source-rtUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-default-debugsourceUpgrade gfs2-kmp-paeUpgrade hyper-v-kmp-paeUpgrade kernel-xenUpgrade kernel-symsUpgrade iscsitarget-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade btrfs-kmp-paeUpgrade kernel-desktop-base-debuginfoUpgrade xen-kmp-traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-paeUpgrade kernel-pae-debugsourceUpgrade ocfs2-kmp-paeUpgrade kernel-default-extraUpgrade lttng-modules-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade drbd-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-debugUpgrade btrfs-kmp-xenUpgrade kernel-ec2-base-debuginfoUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-desktop-debugsourceUpgrade cluster-network-kmp-defaultUpgrade kernel-vanilla-baseUpgrade sle-hae-releaseUpgrade cluster-network-kmp-traceUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade kernel-source | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-3.2.0-41-omapUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.2.0-41-highbank | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub