The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-firmwareUpgrade perfUpgrade kernel-docUpgrade python-perfUpgrade kernel-devel | Dec 1, 2016 | Feb 21, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 28, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 22, 2013 |
| Suse | — | Upgrade kernel-trace-baseUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-paeUpgrade xen-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-paeUpgrade kernel-ec2Upgrade kernel-trace-extraUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-xenUpgrade xen-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-ppc64Upgrade kernel-paeUpgrade gfs2-kmp-traceUpgrade gfs2-kmp-xenUpgrade kernel-ppc64Upgrade kernel-trace-develUpgrade sle-hae-releaseUpgrade cluster-network-kmp-xenUpgrade kernel-pae-extraUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-develUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-paeUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-pae-baseUpgrade kernel-xen-extraUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-xenUpgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-ppc64-baseUpgrade kernel-xen-base | Feb 17, 2015 | Feb 21, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-3.5.0-26-genericUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-3.5.0-26-powerpc64-smp | Nov 8, 2024 | Feb 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub