The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kmod-kvmUpgrade kernel-debugUpgrade python-perfUpgrade kmod-kvm-debugUpgrade kernel-abi-whitelistsUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kernel-headersUpgrade kvmUpgrade perfUpgrade kernel-doc | Dec 1, 2016 | Dec 14, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 14, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 12, 2013 |
| Suse | — | Upgrade kernel-bigsmp-baseUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-bigsmpUpgrade kernel-docsUpgrade kernel-trace-extraUpgrade kernel-desktopUpgrade cluster-network-kmp-xenUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade btrfs-kmp-xenUpgrade kernel-xen-baseUpgrade ocfs2-kmp-rt_traceUpgrade kernel-traceUpgrade kernel-ppc64Upgrade kernel-ec2-develUpgrade kernel-rt_trace-baseUpgrade kernel-xenUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-xenUpgrade drbd-kmp-rt_traceUpgrade kernel-ppc64-develUpgrade kernel-vanillaUpgrade kernel-xen-extraUpgrade kernel-trace-develUpgrade kernel-debugUpgrade xen-kmp-defaultUpgrade kernel-rt_trace-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade gfs2-kmp-xenUpgrade lttng-modules-kmp-rt_traceUpgrade cluster-network-kmp-defaultUpgrade kernel-develUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-develUpgrade ocfs2-kmp-traceUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade btrfs-kmp-defaultUpgrade xen-kmp-traceUpgrade gfs2-kmp-traceUpgrade kernel-pae-develUpgrade ext4dev-kmp-traceUpgrade kernel-desktop-baseUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-xenUpgrade lttng-modules-kmp-rtUpgrade kernel-bigsmpUpgrade kernel-rtUpgrade xen-kmp-paeUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-paeUpgrade kernel-pae-extraUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade kernel-desktop-develUpgrade gfs2-kmp-ppc64Upgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade kernel-rt_traceUpgrade drbd-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-bigsmpUpgrade cluster-network-kmp-bigsmpUpgrade btrfs-kmp-paeUpgrade kernel-rt-baseUpgrade kernel-syms-rtUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmp-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ofed-kmp-rt_traceUpgrade kernel-source-rtUpgrade kernel-debug-baseUpgrade cluster-network-kmp-traceUpgrade sle-hae-releaseUpgrade ext4dev-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-pae | Jan 31, 2014 | Dec 14, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1444-omap4Upgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-3.2.0-60-omapUpgrade linux-image-3.2.0-60-genericUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.2.0-60-powerpc-smpUpgrade linux-image-3.2.0-60-virtualUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-60-powerpc64-smpUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.2.0-60-highbankUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.2.0-60-generic-paeUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.5.0-47-highbank | Nov 8, 2024 | Dec 14, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub