drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions.
CVSS Details
- CVSS 3.1 Base Score: 5.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-doc | Dec 1, 2016 | Apr 14, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 14, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Apr 14, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.13.0-27-genericUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.13.0-27-powerpc-smpUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-3.13.0-27-powerpc-e500mc | Nov 8, 2024 | Apr 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub