The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-headers | Dec 1, 2016 | Mar 26, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 26, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Mar 26, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-64-virtualUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.2.0-64-genericUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-3.2.0-64-powerpc64-smpUpgrade linux-image-3.2.0-64-highbankUpgrade linux-image-3.2.0-64-powerpc-smpUpgrade linux-image-3.2.0-64-generic-paeUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-64-omapUpgrade linux-image-3.2.0-1449-omap4Upgrade linux-image-3.8.0-41-generic | Nov 8, 2024 | Mar 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub