The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-doc | Dec 1, 2016 | Mar 26, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 26, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Mar 26, 2014 |
| Ubuntu | — | Upgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-64-powerpc-smpUpgrade linux-image-3.2.0-64-omapUpgrade linux-image-3.2.0-64-generic-paeUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.2.0-1449-omap4Upgrade linux-image-3.2.0-64-highbankUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.2.0-64-virtualUpgrade linux-image-3.2.0-64-powerpc64-smpUpgrade linux-image-3.2.0-64-genericUpgrade linux-image-3.11.0-22-generic-lpae | Nov 8, 2024 | Mar 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub