NetSight
IP …
medium6.5

CVE-2013-0311

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS us…

Impact

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.6.11
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
RedhatEnterprise Linux
Version 6.0

References