PT-2013-3481 · Linux+3 · Linux Kernel+3
CVE-2013-1943
·
Published
2013-06-10
·
Updated
2023-02-13
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.0
Description
The issue concerns a lack of checks in the KVM subsystem for kernel addresses during memory slot allocation for a guest's physical address space. This allows local users to potentially gain privileges or access sensitive kernel memory information by using a crafted application. The issue is related to specific files in the kernel source code.
Recommendations
For Linux kernel versions prior to 3.0, update to version 3.0 or later to resolve the issue.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse