Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Dec 14, 2013 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-symsUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade xen-kmp-traceUpgrade btrfs-kmp-xenUpgrade gfs2-kmp-traceUpgrade drbd-kmp-rtUpgrade kernel-debugUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-paeUpgrade kernel-desktopUpgrade kernel-xen-extraUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rt_traceUpgrade drbd-kmp-rt_traceUpgrade kernel-vanilla-develUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-rt-baseUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-traceUpgrade kernel-ppc64-develUpgrade sle-hae-releaseUpgrade kernel-vanillaUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-syms-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-develUpgrade kernel-bigsmpUpgrade btrfs-kmp-paeUpgrade kernel-bigsmp-baseUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-rt_trace-baseUpgrade kernel-debug-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-rt_trace-develUpgrade kernel-source-rtUpgrade cluster-network-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade xen-kmp-paeUpgrade kernel-source-vanillaUpgrade ofed-kmp-rt_traceUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-pae-extraUpgrade kernel-bigsmp-develUpgrade kernel-desktop-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt_traceUpgrade ocfs2-kmp-defaultUpgrade ofed-kmp-rtUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64Upgrade gfs2-kmp-bigsmpUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-xenUpgrade kernel-desktop-develUpgrade kernel-develUpgrade cluster-network-kmp-ppc64Upgrade iscsitarget-kmp-rt_traceUpgrade btrfs-kmp-defaultUpgrade lttng-modules-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-traceUpgrade kernel-docsUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-bigsmpUpgrade ocfs2-kmp-ppc64Upgrade kernel-pae-develUpgrade gfs2-kmp-ppc64Upgrade kernel-trace-extraUpgrade gfs2-kmp-xenUpgrade ext4dev-kmp-traceUpgrade kernel-trace-develUpgrade kernel-rt-devel | Jan 31, 2014 | Dec 14, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-genericUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.2.0-1443-omap4 | Nov 8, 2024 | Dec 14, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub