The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade perf | Dec 1, 2016 | Mar 26, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 26, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Mar 26, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-64-generic-paeUpgrade linux-image-3.2.0-1449-omap4Upgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-64-powerpc-smpUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.2.0-64-omapUpgrade linux-image-3.2.0-64-powerpc64-smpUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-3.2.0-64-highbankUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.2.0-64-virtualUpgrade linux-image-3.2.0-64-generic | Nov 8, 2024 | Mar 26, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub