KVM (Kernel-based Virtual Machine) is a full virtualization solution forLinux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built forthe standard Red Hat Enterprise Linux kernel.A divide-by-zero flaw was found in the apic_get_tmcct() function in KVM'sLocal Advanced Programmable Interrupt Controller (LAPIC) implementation.A privileged guest user could use this flaw to crash the host.(CVE-2013-6367)A memory corruption flaw was discovered in the way KVM handled virtual APICaccesses that crossed a page boundary. A local, unprivileged user could usethis flaw to crash the system or, potentially, escalate their privileges onthe system. (CVE-2013-6368)Red Hat would like to thank Andrew Honig of Google for reporting theseissues.All kvm users are advised to upgrade to these updated packages, whichcontain backported patches to correct these issues. Note: the procedure inthe Solution section must be performed before this update will take effect.